Info

Disclosure

Jun 15, 2005

Discovery

Unknown

Dates

Exploit

Jun 15, 2005

Solution

Unknown

Description

A remote overflow exists in ViRobot Linux Server. ViRobot Linux Server fails to perform proper bounds checks in the setuid cgi-bin file 'addschup' when processing the received cookie resulting in a buffer overflow. With a specially crafted request, an attacker can cause arbitrary command execution via inserting commands into the root users crontab file resulting in a loss of integrity.

Classification

Location: Remote/Network Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Available
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, the vendor has released a patch to address this vulnerability.

Products

HAURI Inc.

ViRobot Linux Server

2.0

References

Bugtraq ID: 13964
Secunia Advisory ID: 15700
CVE ID: 2005-2041 (see also: NVD)
ISS X-Force ID: 21000
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2005-06/0188.html
Other Advisory URL: http://www.digitalmunition.com/DMA[2005-0614a].txt
Vendor URL: http://www.globalhauri.com/
Vendor Specific Solution URL: http://www.globalhauri.com/html/download/down_unixpatch.html
Generic Exploit URL: http://www.securiteam.com/exploits/5TP0C1FG1I.html

Credit

Kevin Finisterre - kfdigitalmunition.com -

Direct URL: http://osvdb.org/36218