SCO OpenServer recon First Argument Local Overflow

2001-03-27T00:00:00
ID OSVDB:7647
Type osvdb
Reporter KF(dotslash@snosoft.com)
Modified 2001-03-27T00:00:00

Description

Vulnerability Description

A local overflow exists in OpenServer. The recon command fails to validate user-supplied arguments resulting in a buffer overflow. With a specially crafted request consisting of more than 1315 characters, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Solution Description

Currently, there are no known workarounds or upgrades to correct this issue. However, SCO has released a patch to address this vulnerability.

Short Description

A local overflow exists in OpenServer. The recon command fails to validate user-supplied arguments resulting in a buffer overflow. With a specially crafted request consisting of more than 1315 characters, an attacker can cause arbitrary code execution resulting in a loss of integrity.

References:

Vendor Specific Advisory URL Security Tracker: 1001180 Mail List Post: http://marc.theaimsgroup.com/?l=bugtraq&m=98575462712005&w=2 ISS X-Force ID: 6289 CVE-2001-0577 Bugtraq ID: 2560