OSVDB ID: 8864

Title: Abuse -net Command Line Argument Overflow

Info

Disclosure

Nov 01, 2002

Discovery

Oct 31, 2002

Dates

Exploit

Nov 01, 2002

Solution

Unknown

Description

A local overflow exists in Abuse. The -net command-line argument fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted request to the -net command line option, a malicious user can cause arbitrary code execution resulting in a loss of integrity.

Classification

Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Jonathan Clark

Abuse

2.00

References

Credit

  • Texonet - Texonet


Direct URL: http://osvdb.org/8864