PT-2006-6673 · Realnetworks · Real Networks Helix Mobile Server+1

Evgeny Legerov · Publicado 2006-11-21 · Atualizado 2018-10-17 · CVE-2006-6026

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Real Networks Helix Server versions prior to 11.1.3 Real Networks Helix Mobile Server versions prior to 11.1.3 Real Networks Helix DNA Server versions 11.0 and 11.1

Description A heap-based buffer overflow issue allows remote attackers to cause a denial of service or execute arbitrary code via a DESCRIBE request that contains an invalid LoadTestPassword field.

Recommendations For Real Networks Helix Server versions prior to 11.1.3, update to version 11.1.3 or later. For Real Networks Helix Mobile Server versions prior to 11.1.3, update to version 11.1.3 or later. For Real Networks Helix DNA Server versions 11.0 and 11.1, update to a version later than 11.1.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2006-6026

Produtos afetados

Real Networks Helix Dna Server

Real Networks Helix Mobile Server

Referências · 13

• 🔥 https://exploit-db.com/exploits/3531 · Exploit
• http://secunia.com/advisories/22944 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/1056 · Aviso do Fabricante
• http://securityfocus.com/archive/1/463333/100/0/threaded · Nota
• http://web.archive.org/web/20060502082622/www.gleg.net/vulndisco_pack_professional.shtml · Nota
• http://securityfocus.com/bid/23068 · Nota
• http://lists.helixcommunity.org/pipermail/server-cvs/2007-January/003783.html · Nota
• http://securityfocus.com/bid/21141 · Nota
• http://attrition.org/pipermail/vim/2007-March/001459.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6026 · Nota de Segurança
• http://docs.real.com/docs/security/SecurityUpdate032107Server.pdf · Nota
• http://gleg.net/helix.txt · Nota
• http://attrition.org/pipermail/vim/2007-March/001468.html · Nota