Hi Tim,
My responses below:
On 8/25/06, Tim <pand0ra.usa@gmail.com> wrote:
How did it respond to the exceptions? If the application crashed then
The C# based desktop application crashed whenever it caught these
exceptions.
you are looking at a DoS (Denial of Service) which can be critical
depending on the purpose of the application (Does someones life depend
on it running?). Did the exceptions cause any problems with the
Since this is a desktop application that just interacts with a central
database server, DoS might not be a high profile issue on such an
application. This application runs only in the internal network and is
not exposed on any ports to even the local network.
operating system? You may be able to manipulate those exceptions to
get it to overflow its buffers and then you can shovel some shellcode
at it to gain root/admin access.
I had one query here, since this application is in .Net, is there a
chance of buffer overflow? I heard .Net applications were free from
buffer overflows. Although I also understand that .Net itself is
unmanaged code and could be the point of attack instead of the
application.
What attack scenarios could be possible on such an application? I can
think of two:
1. Spoofing traffic as though it is coming from database server to
crash the application
2. Internet gateway compromise or spoofing that tampers the Internet
replies for the application leading to bufferoverflow.
Thnx.
On 8/25/06, 3 shool <3shool@gmail.com> wrote:
> Hi,
>
> I'm testing a C# desktop application. During my testing so far we have
> found security issues that lead to application crash with following
> type of errors:
>
> 1. Acess Violation Acception
> 2. Null Reference Acception
> 3. Invalid Object Acception
> 4. Application crash dump
>
> Are these issues really a security threat for a desktop application?
>
> We got these errors by sending junk data over the network replies that
> this application gets from its web services. However I fail to
> understand the security implication and risk of these exceptions.
> Since this is a desktop application and not a web service or server
> how would these issues impact the security of the desktop application.
> The application doesn't open any port on the network for incoming
> requests. What would be the best strategy to test such application?
> What would be the points from where attacker could attack such a
> aplication.
>
> I'll really appreciate some enlightening thoughts on above queries.
>
> Thanx in advance.
>
> ------------------------------------------------------------------------
> This List Sponsored by: Cenzic
>
> Need to secure your web apps?
> Cenzic Hailstorm finds vulnerabilities fast.
> Click the link to buy it, try it or download Hailstorm for FREE.
> http://www.cenzic.com/products_services/download_hailstorm.php
> ------------------------------------------------------------------------
------------------------------------------------------------------------
This List Sponsored by: Cenzic
Need to secure your web apps?
Cenzic Hailstorm finds vulnerabilities fast.
Click the link to buy it, try it or download Hailstorm for FREE.
http://www.cenzic.com/products_services/download_hailstorm.php
------------------------------------------------------------------------
