CVE-2008-0309

Related Files

iDEFENSE Security Advisory 2008-02-26.2

Posted Feb 27, 2008

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 02.26.08 - Remote exploitation of a stack based buffer overflow vulnerability in Symantec Scan Engine version 5.1.2 could allow an unauthenticated attacker to execute arbitrary code with the privileges of the scan engine process. Symantec Scan Engine listens on TCP port 1344 to accept files for scanning using the Internet Content Adaptation Protocol (ICAP). If the service is sent a specially malformed RAR file, a stack-based buffer overflow will occur. iDefense has confirmed this vulnerability in the Linux build of the Symantec Scan Engine version 5.1.2. This issue does not affect the Windows build of the product. Previous versions are suspected to be vulnerable.

tags | advisory, remote, overflow, arbitrary, tcp, protocol

systems | linux, windows

advisories | CVE-2008-0309

SHA-256 | 6ac782bba3d896cd76c3ac9a217fb02fe152735e066ce969750e3900b11bdb99

Download | Favorite | View