The following security advisory is sent to the securiteam mailing list, and can
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
WebDrive DoS
------------------------------------------------------------------------
SUMMARY
" <http://www.webdrive.com/products/webdrive/index.html> WebDrive is more
than just an FTP Client. By connecting to WebDAV, FTP, or SFTP servers
through a virtual drive, files are transferred by simply saving them to a
drive letter."
Improper length validation allows attackers to crash WebDrive.
DETAILS
Vulnerable Systems:
* WebDrive version 6.08 build 1131
The name entry field in WebDrive is prone to a buffer overflow
vulnerability due to a programming error.
The name field allows for 257 characters to be copied to a 256 character
buffer.
Successful exploitation causes the program to fail, and crash on future
runs of the program.
ADDITIONAL INFORMATION
The information has been provided by <mailto:acastro@linuxquestions.net>
Adrian Castro.
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to:
list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to:
list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any
kind.
In no event shall we be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages.
