Signature Detail
Short Name |
RTSP:OVERFLOW:DESCRIBE-OF |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
RTSP |
Keywords |
Real Server Describe Overflow |
Release Date |
2003/09/24 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
RTSP: Real Server Describe Overflow
This signature detects attempts to exploit a known vulnerability against Real Networks Real Server. Windows and Linux versions of Real Server are vulnerable. Attackers can send an abnormally long RTSP DESCRIBE request to cause a server overflow and possibly execute arbitrary code.
Extended Description
Helix Universal Server is a multiple type media server distributed and maintained by RealNetworks. It is available for Unix, Linux, and Microsoft Windows platforms. A buffer overflow has been reported in the Helix Universal Server. Due to insufficient bounds checking on the 'describe' field of a RTSP request, it is possible for a user to exploit a boundry condition error. This could lead to the remote execution of arbitrary code with the privileges of the Helix Universal Server process.
Affected Products
- Real Networks Helix Universal Server 9.0.0
References