Netscape Enterprise & FastTrack Authentication Buffer Overflow Vulnerability
BID:847
Info
Netscape Enterprise & FastTrack Authentication Buffer Overflow Vulnerability
| Bugtraq ID: | 847 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 01 1999 12:00AM |
| Updated: | Dec 01 1999 12:00AM |
| Credit: | This vulnerability information was posted to the Bugtraq mailing list in the form of an ISS X-Force Advisory on December 1, 1999. The individuals listed as discovering and researching the vulnerablity were Caleb Sima, Justine Bone and Jon Larimer. |
| Vulnerable: |
Netscape FastTrack Server 3.0.1 Netscape Enterprise Server 3.51 Netscape Enterprise Server 3.6 SP2 Netscape Enterprise Server 3.6 |
| Not Vulnerable: | |
Discussion
Netscape Enterprise & FastTrack Authentication Buffer Overflow Vulnerability
Certain versions of the Netscape FastTrack and Enterprise servers for both Unix and NT contain a remotely exploitable buffer overflow vulnerability. This vulnerability is present in both the Application and Administration servers shipped with the respective packages.The problem lies in the HTTP Basic Authentication procedure for both servers has a buffer overflow condition when a long username or password (over 508 characters) are provided. This may result in an attacker gaining root privileges under UNIX and SYSTEM privileges under NT.
This vulnerability seems to affect mainly the NT versions of the software.
Certain versions of the Netscape FastTrack and Enterprise servers for both Unix and NT contain a remotely exploitable buffer overflow vulnerability. This vulnerability is present in both the Application and Administration servers shipped with the respective packages.The problem lies in the HTTP Basic Authentication procedure for both servers has a buffer overflow condition when a long username or password (over 508 characters) are provided. This may result in an attacker gaining root privileges under UNIX and SYSTEM privileges under NT.
This vulnerability seems to affect mainly the NT versions of the software.
Exploit / POC
Netscape Enterprise & FastTrack Authentication Buffer Overflow Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Netscape Enterprise & FastTrack Authentication Buffer Overflow Vulnerability
Solution:
As taken from the ISS Advisory which is listed in full in the 'Credit' secion of this advisory.
Affected users should upgrade their systems immediately. This vulnerability affects systems running Administration Server with password protected areas that rely on Basic Authentication. If you run any of the affected servers on any platform, upgrade to iPlanet Web Server 4.0sp2 at:
http://www.iplanet.com/downloads/testdrive/detail_161_243.html.
Netscape has stated that FastTrack will not be patched. Although Netscape released service pack 3 for Enterprise Server 3.6 that fixes the vulnerability in the web server, the Administration Server remains vulnerable.
Solution:
As taken from the ISS Advisory which is listed in full in the 'Credit' secion of this advisory.
Affected users should upgrade their systems immediately. This vulnerability affects systems running Administration Server with password protected areas that rely on Basic Authentication. If you run any of the affected servers on any platform, upgrade to iPlanet Web Server 4.0sp2 at:
http://www.iplanet.com/downloads/testdrive/detail_161_243.html.
Netscape has stated that FastTrack will not be patched. Although Netscape released service pack 3 for Enterprise Server 3.6 that fixes the vulnerability in the web server, the Administration Server remains vulnerable.
References
Netscape Enterprise & FastTrack Authentication Buffer Overflow Vulnerability
References:
References:
- X-Force Web Page (Internet Security Systems)