Signature Detail
Short Name |
APP:MISC:CITADEL-BO |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
Citadel UX Buffer Overrun |
Release Date |
2005/03/17 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: Citadel UX Buffer Overrun
This signature detects attempts to exploit a vulnerability against Citadel/UX, a messaging and collaboration system for groupware applications. Because Citadel/UX does not perform sufficient bounds checking when processing USER command arguments, attackers can remotely execute arbitrary code and/or create a denial of service (DoS).
Extended Description
A buffer overrun vulnerability is reported for Citadel/UX. The problem occurs due to insufficient bounds checking when processing 'USER' command arguments. An anonymous remote attacker may be capable of exploiting this issue to execute arbitrary code. This however has not been confirmed. Failed exploit attempts may result in a denial of service.
Affected Products
- Citadel/UX 5.90.0
- Citadel/UX 5.91.0
- Citadel/UX 6.0.0 7
- Citadel/UX 6.0.0 8
- Citadel/UX 6.23.0
References