Infoseek Ultraseek GET Buffer Overflow Vulnerability
BID:874
Info
Infoseek Ultraseek GET Buffer Overflow Vulnerability
| Bugtraq ID: | 874 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | Yes |
| Published: | Dec 15 1999 12:00AM |
| Updated: | Dec 15 1999 12:00AM |
| Credit: | Discovered by USSR Labs and eEYE Digital Security. Publicised ina joint advisory released December 15, 1999. |
| Vulnerable: |
Infoseek Ultraseek 3.1 for NT Infoseek Ultraseek 2.1 for NT |
| Not Vulnerable: | |
Discussion
Infoseek Ultraseek GET Buffer Overflow Vulnerability
Infoseek's Ultraseek enterprise search server listens on port 8765 by default for HTTP commands. The code that handles GET commands has an unchecked buffer that will allow arbitrary code to be executed if it is overflowed.
Infoseek's Ultraseek enterprise search server listens on port 8765 by default for HTTP commands. The code that handles GET commands has an unchecked buffer that will allow arbitrary code to be executed if it is overflowed.
Exploit / POC
Infoseek Ultraseek GET Buffer Overflow Vulnerability
us21sp5.zip - source for exploit for Ultraseek 2.1 running on NT4 SP5
us21sp6.zip - source for exploit for Ultraseek 2.1 running on NT4 SP5
us21sp5.zip - source for exploit for Ultraseek 2.1 running on NT4 SP5
us21sp6.zip - source for exploit for Ultraseek 2.1 running on NT4 SP5
Solution / Fix
Infoseek Ultraseek GET Buffer Overflow Vulnerability
Solution:
Infoseek has released a fix for this issue, available at:
http://software.infoseek.com/products/ultraseek/upgrade_nt.htm
ftp://ftp.infoseek.com/pub/software/ultraseek-3.1.5.exe
Solution:
Infoseek has released a fix for this issue, available at:
http://software.infoseek.com/products/ultraseek/upgrade_nt.htm
ftp://ftp.infoseek.com/pub/software/ultraseek-3.1.5.exe
References
Infoseek Ultraseek GET Buffer Overflow Vulnerability
References:
References:
- Ultraseek Server Home Page (Infoseek)