John Sage ACK_hole01 Potential Remote Heap Buffer Overrun Vulnerability

Bugtraq ID:	9315
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 28 2003 12:00AM
Updated:	Dec 28 2003 12:00AM
Credit:	Discovery of this vulnerability has been credited to Bugtraq Security Systems <[email protected]>.
Vulnerable:	John Sage ACK_hole01.c 0.0.4 John Sage ACK_hole01.c 0.0.3 John Sage ACK_hole01.c 0.0.2
Not Vulnerable:

John Sage ACK_hole01 Potential Remote Heap Buffer Overrun Vulnerability

ACK_hole01 has been reported prone to a remote heap overrun vulnerability. The issue presents itself because the integer variable used to limit data that is read into a heap based buffer, using a read() call, is not initialized. An attacker may potentially exploit this issue to corrupt inline heap memory management chunk headers that are adjacent to the affected buffer.

John Sage ACK_hole01 Potential Remote Heap Buffer Overrun Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

John Sage ACK_hole01 Potential Remote Heap Buffer Overrun Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

John Sage ACK_hole01 Potential Remote Heap Buffer Overrun Vulnerability

References:

• ACK_hole Homepage (John Sage)