Signature Detail
Short Name |
APP:BORLAND-STARTEAM |
|---|---|
Severity |
High |
Recommended |
No |
Category |
APP |
Keywords |
Borland StarTeam Buffer Overflow |
Release Date |
2009/10/20 |
Update Number |
1527 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Borland StarTeam Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the Borland CaliberRM 2006. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.
Extended Description
Borland StarTeam Multicast Service is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary code with SYSTEM-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers. Failed exploit attempts will cause a denial-of-service condition. This issue affects Borland StarTeam Multicast Service 6.4 included in Borland CaliberRM 2006, 2007, and 2008. Other Borland products may also be affected.
Affected Products
- Borland CaliberRM 2006
References
- BugTraq: 28602
- CVE: CVE-2008-0311