EarthStation 5 Search Service Remote File Deletion Vulnerabililty
BID:8753
Info
EarthStation 5 Search Service Remote File Deletion Vulnerabililty
| Bugtraq ID: | 8753 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 03 2003 12:00AM |
| Updated: | Oct 03 2003 12:00AM |
| Credit: | The disclosure of this issue has been credited to random nut <[email protected]>. |
| Vulnerable: |
EarthStation Five ES5 2180 EarthStation Five ES5 1266 |
| Not Vulnerable: | |
Discussion
EarthStation 5 Search Service Remote File Deletion Vulnerabililty
It has been reported that EarthStation 5 is prone to a file deletion vulnerability that may allow a remote attacker to delete arbitrary files on a vulnerable system. The problem is reported to exist in the "Search Service" packet handler employed by the software. An attacker may exploit this issue by sending packet 0Ch and sub-function 07h to a client running the vulnerable version of the software.
Successful exploitation of this issue may allow an attacker to delete files in the shared folder or sensitive files on the system in the context of the user running the vulnerable software. This issue could lead to a denial of service condition causing the system to crash or hang.
It has also been reported that the software is prone to other denial of service and buffer overflow vulnerabilities, however any details have not been specified.
EarthStation 5 build 1266 and 2180 have been reported to be vulnerable to this issue, however other versions may be affected as well.
It has been reported that EarthStation 5 is prone to a file deletion vulnerability that may allow a remote attacker to delete arbitrary files on a vulnerable system. The problem is reported to exist in the "Search Service" packet handler employed by the software. An attacker may exploit this issue by sending packet 0Ch and sub-function 07h to a client running the vulnerable version of the software.
Successful exploitation of this issue may allow an attacker to delete files in the shared folder or sensitive files on the system in the context of the user running the vulnerable software. This issue could lead to a denial of service condition causing the system to crash or hang.
It has also been reported that the software is prone to other denial of service and buffer overflow vulnerabilities, however any details have not been specified.
EarthStation 5 build 1266 and 2180 have been reported to be vulnerable to this issue, however other versions may be affected as well.
References
EarthStation 5 Search Service Remote File Deletion Vulnerabililty
References:
References:
- ES5 Homepage (Earth Station Five)
- EartStation 5 P2P application contains malicious code (random nut