Foundstone Security Advisory FS-091002-SVWS - A buffer overflow exists in versions 3.1 and previous of Savant Web Server. Exploitation of this vulnerability allows remote execution of arbitrary code with daemon privileges. Sending a GET request containing a URL of approximately 291 characters or more causes Savant Web Server to crash. Exploitation is possible and proof of concept code has been authored to demonstrate this problem.
70f37fc074e30ee6045d809d83b646df568badcf9e022b3ef37bb31966b9d22c
------------------------------------------------------------------------
-----
FS Advisory ID: 091002-SVWS
Release Date: September 10, 2002
Product: Savant Web Server 3.1 and previous
Vendors: Savant (https://savant.sourceforge.net)
Type: Buffer Overflow
Severity: The ability to gain remote access to the
system
Authors: Robin Keir (robin.keir@foundstone.com)
Platforms: Microsoft Windows Variants
CVE Candidate: CAN-2002-1120
Foundstone Advisory: https://www.foundstone.com/advisories
------------------------------------------------------------------------
-----
Overview:
A buffer overflow exists in versions 3.1 and previous of Savant Web
Server.
Exploitation of this vulnerability allows remote execution of arbitrary
code
with daemon privileges.
Detailed Description:
Sending a GET request containing a URL of approx. 291 characters or more
causes
Savant Web Server to crash. Exploitation is possible and proof of
concept code
has been authored to demonstrate this problem.
Vendor Response:
Savant was contacted on August 16th, 2002 regarding this vulnerability.
Solution:
Disable the Savant Web Server until a patch is made available by the
vendor.
FoundScan has been updated to check for this vulnerability. For more
information on FoundScan, see the Foundstone website:
https://www.foundstone.com
Disclaimer:
The information contained in this advisory is copyright (c) 2002
Foundstone, Inc. and is believed to be accurate at the time of
publishing, but no representation of any warranty is given,
express, or implied as to its accuracy or completeness. In no
event shall the author or Foundstone be liable for any direct,
indirect, incidental, special, exemplary or consequential
damages resulting from the use or misuse of this information.
This advisory may be redistributed, provided that no fee is
assigned and that the advisory is not modified in any way.