Sambar Server Results.STM Post Request Buffer Overflow Vulnerability

Bugtraq ID:	9607
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 09 2004 12:00AM
Updated:	Feb 09 2004 12:00AM
Credit:	Discorvery of this issue is credited to ned <[email protected]>.
Vulnerable:	Sambar Server 6.0 Beta3 Sambar Server 6.0
Not Vulnerable:

Sambar Server Results.STM Post Request Buffer Overflow Vulnerability

A buffer overflow vulnerability has been reported in the Sambar web server. The issue is due to a boundary condition error in the POST data processing of the affected software.

Immediate consequences of an attack may result in a denial of service condition. It may also be possible for the attacker to manipulate process memory and execute arbitrary code in the context of the vulnerable process.

Sambar Server Results.STM Post Request Buffer Overflow Vulnerability

The following exploit has been supplied.

• /data/vulnerabilities/exploits/sambarSmudge.py

Sambar Server Results.STM Post Request Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sambar Server Results.STM Post Request Buffer Overflow Vulnerability

References:

• Sambar 6.0 stack overflow (ned )
  
• Sambar Server Product Home Page (Sambar Technologies)