OSVDB ID: 33523 Title: IDA Pro Remote Debugger Server Authentication Bypass |
Info |
|
|
Dates |
||||
|
|
Description |
IDA Pro Remote Debugger Server contains a flaw that may allow a malicious user to bypass password functionality. It is possible that the flaw may allow the execution of arbitrary code under the context of the user that started the debugger server resulting in a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Authentication Management Impact: Loss of Integrity Exploit: Exploit Private, Exploit Unknown Disclosure: OSVDB Verified |
Solution |
DataRescue has released a patch to address this vulnerability. Additionally, it is possible to correct the flaw by implementing the following workaround(s): - The remote debugger server should not be left running when it is not in use. - Access to the port used by the remote debugger server could be blocked with the use of a firewall. |
Products |
|
References |
|
Credit |
|