A remote overflow exists in PSOProxy. The program fails to handle long HTTP GET or method name requests resulting in a buffer overflow. With a specially crafted request, an attacker can cause the execution of arbitrary code.

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

• Secunia Advisory ID: 10948
• ISS X-Force ID: 15275
• Milw0rm: 156
• Exploit Database: 156
• CVE ID: 2004-0313 (see also: NVD)
• Metasploit ID: 4028
• Bugtraq ID: 9706
• Other Advisory URL: http://marc.theaimsgroup.com/?l=bugtraq&m=107730731900261&w=2
  http://marc.theaimsgroup.com/?l=bugtraq&m=107756005123920&w=2
• Vendor URL: http://psoproxy.sourceforge.net/
• Generic Exploit URL: http://www.securityfocus.com/data/vulnerabilities/exploits/pso-exploit.c
  http://www.securityfocus.com/data/vulnerabilities/exploits/PSOProxy-exp.c
• Keyword: PSOProxy,Overflow

• Donato Ferrante - fdonatoautistici.org - Personal Page