EvolutionX Multiple Remote Buffer Overflow Vulnerabilities
BID:9631
Info
EvolutionX Multiple Remote Buffer Overflow Vulnerabilities
| Bugtraq ID: | 9631 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2004-0268 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 10 2004 12:00AM |
| Updated: | Jul 12 2009 02:06AM |
| Credit: | Discovery of these vulnerabilities has been credited to icbm <[email protected]> and Stefan Esser <[email protected]>. |
| Vulnerable: |
EvolutionX EvolutionX Build 3935 EvolutionX EvolutionX Build 3921 |
| Not Vulnerable: | |
Discussion
EvolutionX Multiple Remote Buffer Overflow Vulnerabilities
The FTP server that is distributed with EvolutionX has been reported prone to multiple buffer overflow vulnerabilities. The first of these vulnerabilities exists post-authentication, and is due to a lack of sufficient bounds checking performed on arguments that are passed to the 'cd' command.
The second issue exists pre-authentication, excessive data passed as username:password combination to the affected FTP server will trigger the buffer overrun.
Finally the telnet server that is distributed with EvolutionX has been reported prone to a buffer overflow vulnerability when handling excessive data passed as an argument to the 'dir' command.
An attacker may exploit any one of these issues to deny service to legitimate users of the XBOX appliance, it has been conjectured that these issues may be exploitable to result in arbitrary code execution.
The FTP server that is distributed with EvolutionX has been reported prone to multiple buffer overflow vulnerabilities. The first of these vulnerabilities exists post-authentication, and is due to a lack of sufficient bounds checking performed on arguments that are passed to the 'cd' command.
The second issue exists pre-authentication, excessive data passed as username:password combination to the affected FTP server will trigger the buffer overrun.
Finally the telnet server that is distributed with EvolutionX has been reported prone to a buffer overflow vulnerability when handling excessive data passed as an argument to the 'dir' command.
An attacker may exploit any one of these issues to deny service to legitimate users of the XBOX appliance, it has been conjectured that these issues may be exploitable to result in arbitrary code execution.
Exploit / POC
EvolutionX Multiple Remote Buffer Overflow Vulnerabilities
"Mike Brownbill" <[email protected]> has supplied the following proof of concept denial of service exploit:
"Mike Brownbill" <[email protected]> has supplied the following proof of concept denial of service exploit:
Solution / Fix
EvolutionX Multiple Remote Buffer Overflow Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
EvolutionX Multiple Remote Buffer Overflow Vulnerabilities
References:
References:
- EvolutionX Homepage (EvolutionX)
- XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow (icbm