Signature Detail
Short Name |
APP:PEERCAST-CMD-BOF |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Peercast Command Buffer Overflow |
Release Date |
2006/05/25 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Peercast Command Buffer Overflow
This signature detects attempts to exploit a known vulnerability against Peercast software. Attackers can send a maliciously crafted HTTP Get request with an overly long parameter, to cause a buffer overflow and allow them to execute remote arbitrary code.
Extended Description
PeerCast is prone to a remote buffer-overflow vulnerability. A remote attacker could exploit this issue to execute arbitrary code. PeerCast 0.1215 and earlier are vulnerable.
Affected Products
- Gentoo Linux
- peercast.org PeerCast 0.1211.0
- peercast.org PeerCast 0.1212.0
- peercast.org PeerCast 0.1215
References
- BugTraq: 17040
- BugTraq: 26899
- CVE: CVE-2006-1148
- CVE: CVE-2007-6454
- URL: http://www.peercast.org/forum/viewtopic.php?t=3346