SecurityTracker.com
    Home    |    View Topics    |    Search    |    Contact Us    |   

SecurityTracker
Archives


 


Category:   Application (Multimedia)  >   Helix DNA Server Vendors:   helixcommunity.org, RealNetworks
Helix DNA Server Buffer Overflow in RTSP Service Lets Remote Users Execute Arbitrary Code
SecurityTracker Alert ID:  1016365
SecurityTracker URL:  http://securitytracker.com/id/1016365
CVE Reference:   CVE-2006-3276   (Links to External Site)
Updated:  May 11 2009
Original Entry Date:  Jun 23 2006
Impact:   Execution of arbitrary code via network, User access via network

Version(s): 10.0.x, 11.0.x
Description:   A vulnerability was reported in Helix DNA Server. A remote user can execute arbitrary code on the target system.

A remote user can send a specially crafted HTTP header to trigger a buffer overflow in the RTSP service and execute arbitrary code on the target system. The code will run with the privileges of the target service.

A remote user can also send a specially crafted HTTP request to trigger a flaw in the parsing of HTTP URLs and execute arbitrary code on the target system.

Mu Security research team discovered this vulnerability.

The original advisory is available at:

http://labs.musecurity.com/advisories/MU-200606-01.txt

Impact:   A remote user can execute arbitrary code on the target system.
Solution:   No solution was available at the time of this entry.

[Editor's note: The advisory suggests that a fix may be available, however, no further details are provided.]

Vendor URL:  helix-server.helixcommunity.org/ (Links to External Site)
Cause:   Boundary error

Message History:   None.


 Source Message Contents

Subject:  [Full-disclosure] [MU-200606-01] Real Helix RTSP Server Heap

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Real Helix RTSP Server Heap Corruption Vulnerabilities [MU-200606-01]
June 22, 2006

http://labs.musecurity.com/advisories.html

Affected Product / Versions:

Real Networks Helix DNA Server 11.0.x
Real Networks Helix DNA Server 10.0.x

Product Overview:

The Real Time Streaming Protocol (RTSP) is a protocol which allows a
client to remotely control a streaming media server.  RTSP is
implemented in the Real Helix Server, a cross platform media
streaming server with a wide deployment.

Vulnerability Details:

A remote buffer overflow condition in Real Helix's RTSP service could
allow for arbitrary code execution.  The vulnerable code is triggered
with the use of a malformed HTTP header.

A second vulnerability of equal criticality was also discovered.
This bug involved the parsing of HTTP URLs.

Vendor Response / Solution:

Mu Security would like to thank Real for timely remediation of these
vulnerabilities.

Credit:

This vulnerability was discovered by the Mu Security research team.

http://labs.musecurity.com/pgpkey.txt

Mu Security is an early-stage innovator creating a new class of
security analysis system. The company's mission is to widely deploy
security analysis and reduce product and application vulnerabilities.
 Mu's founders include industry-recognized  experts in the IDP, open
source protocol analysis tools, ethical hacking, and network
management markets The security analysis process and product solution
provide a rigorous and streamlined methodology for verifying and
improving the security readiness of any IP-based product or
application.  Mu Security, headquartered in Sunnyvale, California, is
backed by preeminent venture capital firms including Accel Partners
and Benchmark Capital.

The information within this paper may change without notice. Use of
this information constitutes acceptance for use in an AS IS
condition. There are no warranties, implied or express, with regard
to this information. In no event shall the author be liable for any
direct or indirect damages whatsoever arising out of or in connection
with the use or spread of this information. Any use of this
information is at the user's own risk.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (Darwin)

iD8DBQFEmu4OMl+docYeP+YRApi1AJ9BIZQvNfsJhAl2tWeI74LmfO8JUQCfarx7
QEPD6E9M96Ywi/B57n7Cdkw=
=34aO
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

 
 


Go to the Top of This SecurityTracker Archive Page





Home   |    View Topics   |    Search   |    Contact Us

This web site uses cookies for web analytics. Learn More

Copyright 2020, SecurityGlobal.net LLC