APP: Citadel UX Buffer Overrun
This signature detects attempts to exploit a vulnerability against Citadel/UX, a messaging and collaboration system for groupware applications. Because Citadel/UX does not perform sufficient bounds checking when processing USER command arguments, attackers can remotely execute arbitrary code and/or create a denial of service (DoS).
Extended Description
A buffer overrun vulnerability is reported for Citadel/UX. The problem occurs due to insufficient bounds checking when processing 'USER' command arguments. An anonymous remote attacker may be capable of exploiting this issue to execute arbitrary code. This however has not been confirmed. Failed exploit attempts may result in a denial of service.
Affected Products
Citadel/ux citadel/ux
References
BugTraq: 10833
CVE: CVE-2004-1705
URL: http://www.k-otik.com/exploits/09092004.citadel-private.c.php http://www.securiteam.com/unixfocus/5CP060ADPO.html
Short Name
APP:MISC:CITADEL-BO
Severity
Major
Recommended
False
Recommended Action
Drop
Category
APP
Keywords
Buffer CVE-2004-1705 Citadel Overrun UX bid:10833
Release Date
03/17/2005
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
Port
TCP/504
False Positive
Unknown
Vendors
Citadel/ux
CVSS Score
5.0