Vulnerability Bulletins |
Vulnerabilidad de desbordamiento de búfer en RealNetworks Helix Server/Proxy |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Avanzado |
| Required attacker level | Acceso remoto con cuenta |
System information |
|
| Property | Value |
| Affected manufacturer | Comercial Software |
| Affected software |
Helix Universal Mobile Server & Gateway 10, <=10.1.1.120 Helix Universal Server & Gateway 9, <=9.0.2.88 |
Description |
|
| Se ha descubierto una vulnerabilidad de desbordamiento de búfer en las versiones 9.0.2.88 y anteriores de RealNetworks Helix Universal Server/Gateway y en las versiones 10.1.1.120 y anteriores de RealNetworks Helix Universal Mobile Server/Gateway. La explotación de esta vulnerabilidad podría permitir a un atacante remoto autentificado en la interfaz de administración de estos productos la ejecución de código en el servidor mediante el envío de peticiones HTTP POST especialmente diseñadas. | |
Solution |
|
|
Actualización de software Helix Universal Server/Gateway 9 Compaq http://forms.real.com/rnforms/products/servers/download/download.final.html?platform=Compaq+Tru64+5.1+%26+5.1A&product=Helix+Universal+Server&program=basic&version=Helix+Universal+Server FreeBSD http://forms.real.com/rnforms/products/servers/download/download.final.html?platform=FreeBSD+4.0+%26+4.5&product=Helix+Universal+Server&program=basic&version=Helix+Universal+Server HP UX http://forms.real.com/rnforms/products/servers/download/download.final.html?platform=HP+UX+11.0+%26+11.i&product=Helix+Universal+Server&program=basic&version=Helix+Universal+Server IBM AIX http://forms.real.com/rnforms/products/servers/download/download.final.html?platform=IBM+AIX+4.3+%26+5L&product=Helix+Universal+Server&program=basic&version=Helix+Universal+Server Linux http://forms.real.com/rnforms/products/servers/download/download.final.html?platform=Linux+version+2.4.18&product=Helix+Universal+Server&program=basic&version=Helix+Universal+Server Sun Solaris 2.7 http://forms.real.com/rnforms/products/servers/download/download.final.html?platform=Sun+Solaris+2.7&product=Helix+Universal+Server&program=basic&version=Helix+Universal+Server Sun Solaris 2.8 http://forms.real.com/rnforms/products/servers/download/download.final.html?platform=Sun+Solaris+2.8&product=Helix+Universal+Server&program=basic&version=Helix+Universal+Server Windows http://forms.real.com/rnforms/products/servers/download/download.final.html?platform=Windows+NT+4.0+%26+2000&product=Helix+Universal+Server&program=basic&version=Helix+Universal+Server Helix Universal Mobile Server/Gateway 10 Solaris 2.8 http://docs.real.com/docs/022604_pluginupdate/solaris/adminfs.so_sunos-58.gz Linux http://docs.real.com/docs/022604_pluginupdate/linux/adminfs.so_linux.gz |
|
Standar resources |
|
| Property | Value |
| CVE | CAN-2004-0049 |
| BID | |
Other resources |
|
|
RealNetworks Security Advisory http://service.real.com/help/faq/security/security022604.html |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2004-03-19 |