what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Zero Day Initiative Advisory 07-072

Posted Dec 11, 2007

Authored by Tipping Point, Tenable Network Security | Site zerodayinitiative.com

Vulnerabilities allow attackers to execute arbitrary code on vulnerable installations of Novell NetMail. User interaction is not required to exploit this vulnerability. The specific flaws exist in the AntiVirus agent which listens on a random high TCP port. The avirus.exe service protocol reads a user-supplied ASCII integer value as an argument to a memory allocation routine. The specified size is added to without any integer overflow checks and can therefore result in an under allocation. A subsequent memory copy operation can then corrupt the heap and eventually result in arbitrary code execution. Novell NetMail version 3.5.2 is affected.

tags | advisory, overflow, arbitrary, tcp, vulnerability, code execution, protocol

advisories | CVE-2007-6302

SHA-256 | 2ef213b576dde799161a7dca2bb9007bbc157e7e6026f89a655e0f020974aebd

Download | Favorite | View

Related Files

No related files