Helix DNA Server Buffer Overflow in RTSP Service Lets Remote Users Execute Arbitrary Code
SecurityTracker Alert ID: 1016365|
SecurityTracker URL: http://securitytracker.com/id/1016365
(Links to External Site)
Updated: May 11 2009|
Original Entry Date: Jun 23 2006
Execution of arbitrary code via network, User access via network|
Version(s): 10.0.x, 11.0.x|
A vulnerability was reported in Helix DNA Server. A remote user can execute arbitrary code on the target system.|
A remote user can send a specially crafted HTTP header to trigger a buffer overflow in the RTSP service and execute arbitrary code on the target system. The code will run with the privileges of the target service.
A remote user can also send a specially crafted HTTP request to trigger a flaw in the parsing of HTTP URLs and execute arbitrary code on the target system.
Mu Security research team discovered this vulnerability.
The original advisory is available at:
A remote user can execute arbitrary code on the target system.|
No solution was available at the time of this entry.|
[Editor's note: The advisory suggests that a fix may be available, however, no further details are provided.]
Vendor URL: helix-server.helixcommunity.org/ (Links to External Site)
Source Message Contents
Subject: [Full-disclosure] [MU-200606-01] Real Helix RTSP Server Heap|
-----BEGIN PGP SIGNED MESSAGE-----
Real Helix RTSP Server Heap Corruption Vulnerabilities [MU-200606-01]
June 22, 2006
Affected Product / Versions:
Real Networks Helix DNA Server 11.0.x
Real Networks Helix DNA Server 10.0.x
The Real Time Streaming Protocol (RTSP) is a protocol which allows a
client to remotely control a streaming media server. RTSP is
implemented in the Real Helix Server, a cross platform media
streaming server with a wide deployment.
A remote buffer overflow condition in Real Helix's RTSP service could
allow for arbitrary code execution. The vulnerable code is triggered
with the use of a malformed HTTP header.
A second vulnerability of equal criticality was also discovered.
This bug involved the parsing of HTTP URLs.
Vendor Response / Solution:
Mu Security would like to thank Real for timely remediation of these
This vulnerability was discovered by the Mu Security research team.
Mu Security is an early-stage innovator creating a new class of
security analysis system. The company's mission is to widely deploy
security analysis and reduce product and application vulnerabilities.
Mu's founders include industry-recognized experts in the IDP, open
source protocol analysis tools, ethical hacking, and network
management markets The security analysis process and product solution
provide a rigorous and streamlined methodology for verifying and
improving the security readiness of any IP-based product or
application. Mu Security, headquartered in Sunnyvale, California, is
backed by preeminent venture capital firms including Accel Partners
and Benchmark Capital.
The information within this paper may change without notice. Use of
this information constitutes acceptance for use in an AS IS
condition. There are no warranties, implied or express, with regard
to this information. In no event shall the author be liable for any
direct or indirect damages whatsoever arising out of or in connection
with the use or spread of this information. Any use of this
information is at the user's own risk.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v184.108.40.206 (Darwin)
-----END PGP SIGNATURE-----
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/