PLD Software Ebola Buffer Overflow Vulnerability

Bugtraq ID:	9156
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 05 2003 12:00AM
Updated:	Dec 05 2003 12:00AM
Credit:	Discovered by Secure Network Operations, Inc.
Vulnerable:	Paul L Daniels Ebola 0.1.4
Not Vulnerable:	Paul L Daniels Ebola 0.1.5

PLD Software Ebola Buffer Overflow Vulnerability

It has been reported that a buffer overflow condition is present in the authentication mechanism implemented in Ebola. The condition is due to the use of the C library function sprintf() to construct an error message when authentication is not successful. According to the discoverer of this flaw, the vulnerability is remotely exploitable.

PLD Software Ebola Buffer Overflow Vulnerability

The discoverer of this issue has stated that exploit code has been developed. An exploit has been made available by c0wboy and is available below.

• /data/vulnerabilities/exploits/0x333ebola.c

PLD Software Ebola Buffer Overflow Vulnerability

Solution:
The vendor has issued an upgrade, version 0.1.5, that is no longer vulnerable:


Paul L Daniels Ebola 0.1.4

• Paul L Daniels ebola-0.1.5.tar.gz
  http://pldaniels.com/ebola/ebola-0.1.5.tar.gz

PLD Software Ebola Buffer Overflow Vulnerability

References:

• ebola 0.1.4 remote exploit (c0wboy@0x333 )
  
• SRT2003-12-04-0723 - PLDaniels Ebola remote overflow (KF )