full-disclosure - Re: CSIS Advisory: BlueCoat K9 Web Protection 3.2.36 Overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <46698C06.7070607@msu.edu>
Date: Fri, 08 Jun 2007 13:04:06 -0400
From: Jared DeMott <demottja@....edu>
To: Dennis Rand <rand@...s.dk>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: CSIS Advisory: BlueCoat K9 Web Protection
 3.2.36 Overflow

Dennis Rand wrote:
> CSIS Security Group has discovered a remote exploitable arbitrary
> overwrite, in the Blue Coat
> K9 Web Protection local Web configuration manager on 127.0.0.1 and port
> 2372.
>
>   
Justin Seitz of VDA Labs (www.vdalabs.com) already found this bug.
Here's the CVE: CVE-2007-1783.

 They had so many bugs, they're rolling this issue and more into the
next release.

We have a working PoC, and believe it could be transformed into remote
via embedded link.  For example:
<SCRIPT SRC="http://127.0.0.1:2372/<buffer here>
<http://127.0.0.1:2372/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA>"></SCRIPT>

Blessings,
Jared

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/