CVE

Id
5825  
CVE No.
CVE-2002-1441  
Status
Candidate  
Description
Multiple buffer overflows in Tomahawk SteelArrow before 4.5 allow remote attackers to execute arbitrary code via (1) the Steelarrow Service (Steelarrow.exe) using a long UserIdent Cookie header, (2) DLLHOST.EXE (Steelarrow.dll) via a request for a long .aro file, or (3) DLLHOST.EXE via a Chunked Transfer-Encoding request.  
Phase
Proposed (20030317)  
Votes
ACCEPT(1) Cole | MODIFY(1) Baker | NOOP(2) Cox, Wall  
Comments
Baker> THere is no changelog file in the installer either, so it is difficult to determine how many issues were addressed in the new version.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
32770 5825 CVE-2002-1441 BUGTRAQ:20020819 Multiple Buffer Overflow vulnerabilities in SteelArrow (#NISR19082002B)  View
32771 5825 CVE-2002-1441 URL:http://online.securityfocus.com/archive/1/288013  View
32772 5825 CVE-2002-1441 VULNWATCH:20020819 Multiple Buffer Overflow vulnerabilities in SteelArrow (#NISR19082002B)  View
32773 5825 CVE-2002-1441 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0085.html  View
32774 5825 CVE-2002-1441 MISC:http://www.steelarrow.com/  View
32775 5825 CVE-2002-1441 MISC:http://www.nextgenss.com/advisories/steel-arrow-bo.txt  View
32776 5825 CVE-2002-1441 MISC:http://www.nextgenss.com/vna/tom-saro.txt  View
32777 5825 CVE-2002-1441 XF:steelarrow-userident-bo(9888)  View
32778 5825 CVE-2002-1441 URL:http://www.iss.net/security_center/static/9888.php  View
32779 5825 CVE-2002-1441 XF:steelarrow-long-aro-bo(9889)  View
32780 5825 CVE-2002-1441 URL:http://www.iss.net/security_center/static/9889.php  View
32781 5825 CVE-2002-1441 XF:steelarrow-chunked-aro-bo(9890)  View
32782 5825 CVE-2002-1441 URL:http://www.iss.net/security_center/static/9890.php  View
32783 5825 CVE-2002-1441 BID:4860  View
32784 5825 CVE-2002-1441 URL:http://www.securityfocus.com/bid/4860  View
32785 5825 CVE-2002-1441 BID:5494  View
32786 5825 CVE-2002-1441 URL:http://www.securityfocus.com/bid/5494  View
32787 5825 CVE-2002-1441 BID:5496  View
32788 5825 CVE-2002-1441 URL:http://www.securityfocus.com/bid/5496  View
32789 5825 CVE-2002-1441 BID:5495  View

Related JVN