Knox Arkeia Remote Stack Corruption Vulnerability

Bugtraq ID:	8657
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 19 2003 12:00AM
Updated:	Sep 19 2003 12:00AM
Credit:	The discovery of this vulnerability has been credited to "A. C." <[email protected]>.
Vulnerable:	Knox Software Arkeia Pro 5.1.12
Not Vulnerable:

Knox Arkeia Remote Stack Corruption Vulnerability

A remote vulnerability has been reported for the Knox Arkeia server. The problem is said to occur when handling excessive data contained within specific types of packets. The problem likely occurs due to insufficient bounds checking when handling this data, and as a result it may be possible to corrupt sensitive locations within stack memory. Successful exploitation of this issue could ultimately

Knox Arkeia Remote Stack Corruption Vulnerability

An exploit has been made available by "A. C." <[email protected]>.

• /data/vulnerabilities/exploits/ark_sink.c

Knox Arkeia Remote Stack Corruption Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Knox Arkeia Remote Stack Corruption Vulnerability

References:

• Knox Software Home Page (Knox Software)
  
• Knox Arkeia Pro v5.1.12 remote root exploit ("A. C." )