JVNDB-2004-000511

DeleGate Multiple Buffer Overflow Vulnerabilities

DeleGate suffers buffer overflow when scanf(), strncpy() and other string handling process are set to fail with a long string sent by proxy.

Base Metrics: 7.5 (High) [NVD Score]

• Access Vector: Network
• Access Complexity: Low
• Authentication: None
• Confidentiality Impact: Partial
• Integrity Impact: Partial
• Availability Impact: Partial

DeleGate.org

• DeleGate 8.10.2 and earlier

An attacker could execute arbitrary code with the privileges of the user running DeleGate.

Please refer to the 'Vendor Information' section for official remediation and take appropriate action.

DeleGate.org

• DeleGate : 2793
• DeleGate : 12546
• DeleGate : 12545

1. CVE-2005-0861

1. National Vulnerability Database (NVD) : CVE-2005-0861
2. Secunia Advisory : SA14649
3. SecurityFocus : 12867
4. ISS X-Force Database : 19775

[2008/05/21]
  Web page published