|
|
Info |
Last Modified |
| 2 months ago |
|
|
|
|
Description |
There is a stack overflow in the vcst_eu.dll FileTransfer Module (1.0.0.5) ActiveX control in the Tumbleweed SecureTransport suite. By sending an overly long string to the TransferFile() 'remotefile' function, an attacker may be able to execute arbitrary code.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Patch
Exploit:
Exploit Available
Disclosure:
OSVDB Verified,
Vendor Verified,
Coordinated Disclosure
OSVDB:
Web Related
|
|
Technical |
When a large value is specified for the 'remoteFile' parameter of the IActiveXTransfer.FileTransfer() method, a stack overflow occurs. Exploitation can result in code execution under the context of the current user. Other parameters, such as localFile, fdxCookie and localFile may also vulnerable.
|
|
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Tumbleweed Communications has released a patch to address this vulnerability.
|
|
Products |
|

|
4.6.1 |
|
|
|
|
|
Credit |
- Patrick Webster - patrick
aushack.com - aushack
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|