bugtraq - Secunia Research: Sterling Trader Data Processing Buffer Overflow Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <201112131156.pBDBuSIn017585@localhost.localdomain>
Date: Tue, 13 Dec 2011 12:56:28 +0100
From: Secunia Research <remove-vuln@...unia.com>
To: bugtraq@...urityfocus.com
Subject: Secunia Research: Sterling Trader Data Processing Buffer Overflow Vulnerability

====================================================================== 

                     Secunia Research 13/12/2011

  - Sterling Trader Data Processing Buffer Overflow Vulnerability -

====================================================================== 
Table of Contents

Affected Software....................................................1
Severity.............................................................2
Vendor's Description of Software.....................................3
Description of Vulnerability.........................................4
Solution.............................................................5
Time Table...........................................................6
Credits..............................................................7
References...........................................................8
About Secunia........................................................9
Verification........................................................10

====================================================================== 
1) Affected Software 

* Sterling Trader 7.0.2

NOTE: Other versions may also be affected.

====================================================================== 
2) Severity 

Rating: Moderately critical
Impact: System access
Where:  From local network

======================================================================
3) Vendor's Description of Software 

"Sterling Trader is a broker-neutral, independent service bureau
providing advanced trading software and global network technology to
financial institutions and professional traders around the world. Our
state of the art computer network and innovative trading tools make
Sterling Trader the broker network of choice."

Product Link:
http://www.sterlingtrader.com/

====================================================================== 
4) Description of Vulnerability

Secunia Research has discovered a vulnerability in Sterling Trader,
which can be exploited by malicious people to compromise a vulnerable
system.

The vulnerability is caused due to a boundary error in Base.exe when
processing network requests (code 176). This can be exploited to cause 
a stack-based buffer overflow via a specially crafted packet sent to 
a certain TCP port.

Successful exploitation allows execution of arbitrary code, but
requires guessing the TCP port, which is dynamically assigned.

====================================================================== 
5) Solution 

Restrict access to trusted hosts only.

====================================================================== 
6) Time Table 

25/11/2011 - Requested security contact.
06/12/2011 - 2nd request for a security contact.
13/12/2011 - Public disclosure.

====================================================================== 
7) Credits 

Discovered by Dmitriy Pletnev, Secunia Research.

====================================================================== 
8) References

The Common Vulnerabilities and Exposures (CVE) project has assigned 
CVE-2011-3842 for the vulnerability.

====================================================================== 
9) About Secunia

Secunia offers vulnerability management solutions to corporate
customers with verified and reliable vulnerability intelligence
relevant to their specific system configuration:

http://secunia.com/advisories/business_solutions/

Secunia also provides a publicly accessible and comprehensive advisory
database as a service to the security community and private 
individuals, who are interested in or concerned about IT-security.

http://secunia.com/advisories/

Secunia believes that it is important to support the community and to
do active vulnerability research in order to aid improving the 
security and reliability of software in general:

http://secunia.com/secunia_research/

Secunia regularly hires new skilled team members. Check the URL below
to see currently vacant positions:

http://secunia.com/corporate/jobs/

Secunia offers a FREE mailing list called Secunia Security Advisories:

http://secunia.com/advisories/mailing_lists/

====================================================================== 
10) Verification 

Please verify this advisory by visiting the Secunia website:
http://secunia.com/secunia_research/2011-83/

Complete list of vulnerability reports published by Secunia Research:
http://secunia.com/secunia_research/

======================================================================