RPC: XDR Integer Overflow

This signature detects attempts to exploit a known vulnerability against the SUN XDR/RPC library. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the logged in user.

Extended Description

A vulnerability has been discovered in the Sun XDR library. Specifically, an integer overflow as been found in the xdrmem_getbytes() function. As a result, applications implementing the vulnerable library call may be prone to denial of service attacks. It should be noted that the vulnerable library code has been implemented by various libraries including BSD's libc, Glibc, and Sun Microsystem's libnsl.

Affected Products

Freebsd freebsd

References

BugTraq: 7123

CVE: CVE-2003-0028

URL: http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2003-003-xdr.txt ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2003-008.txt.asc

Short Name

RPC:XDR-INTEGER-OVERFLOW

Severity

Major

Recommended

False

Recommended Action

Drop

RPC: XDR Integer Overflow

Extended Description

Affected Products

References

Found a potential security threat?