HTTP: Rhino Software Serv-U Server HTTP Request Handling Buffer Overflow

This signature detects attempts to exploit a known vulnerability against Rhino Software Serv-U. A successful attack can lead to arbitrary code execution.

Extended Description

RhinoSoft Serv-U Web Client is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. Serv-U Web Client 9.0.0.5 is vulnerable; other versions prior to Serv-U Web Client 9.1.0.0 may also be affected.

Affected Products

Rhino_software serv-u_web_client

References

BugTraq: 36895 37051

CVE: CVE-2009-4006

URL: http://www.serv-u.com/releasenotes/ http://www.rangos.de/servu-adv.txt

Short Name

HTTP:STC:RHINO-HDR-OF

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Rhino Software Serv-U Server HTTP Request Handling Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?