|
|
Info |
Last Modified |
| 6 months ago |
|
|
|
|
Description |
A remote overflow exists in Open DC Hub. The product fails to properly check the size of a passed argument to the RedirectAll command resulting in a buffer overflow. With a specially crafted request, an attacker can execute code on the affected system.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Available
Disclosure:
OSVDB Verified
|
|
Technical |
In order to execute the RedirectAll command and thus, exploit this vulnerability the attacker must be logged in as an administrator. When the command is executed the passed string is copied into a buffer that is not properly sanitized and a classical overflow occurs.
|
|
Solution |
Upgrade to version 0.7.14-r2 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
Gentoo Linux has provided an updated package for its users. Instructions for installing this package are contained in the referenced Gentoo advisory.
|
|
Products |
|
Open DC Hub
 |
0.7.14 |
|
|
|
|
|
|
Credit |
- Donato Ferrante - fdonato
 autistici.org - Personal Page
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
