[NT] BitComet URI Buffer Overflow
- From: SecuriTeam <support@xxxxxxxxxxxxxx>
- Date: 19 Jan 2006 16:56:07 +0200
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
BitComet URI Buffer Overflow
------------------------------------------------------------------------
SUMMARY
<http://www.bitcomet.com/> BitComet is "a p2p file-sharing freeware fully
compatible with BitTorrent, which is one of the most popular p2p protocol
designed for high-speed distribution of 100MB or GB sized files".
BitComet is vulnerable to a buffer overflow that allow remote attackers to
cause the program to execute arbitrary code by supplying the product with
a specially crafted BitTorrent request.
DETAILS
Vulnerable Systems:
* BitComet version 0.60
Immune Systems:
* BitComet version 0.61
A vulnerability in BitComet, allows remote attackers construct a special
torrent file and put it on any BitTorrent publishing web site. When a
user downloads the .torrent file and clicks on publishers name, BitComet
will crash. An attacker can run arbitrary code on victims' host by
specially crafted .torrent file.
ADDITIONAL INFORMATION
The information has been provided by <mailto:vulnmonitor@xxxxxxxxxxxx>
Fortinet Research.
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@xxxxxxxxxxxxxx
In order to subscribe to the mailing list, simply forward this email to: list-subscribe@xxxxxxxxxxxxxx
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any kind.
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.
- Prev by Date: [NEWS] Oracle Transparent Data Encryption Information Disclosure Vulnerability
- Next by Date: [NEWS] Cisco IOS Stack Group Bidding Protocol Crafted Packet DoS
- Previous by thread: [NEWS] Oracle Transparent Data Encryption Information Disclosure Vulnerability
- Next by thread: [NEWS] Cisco IOS Stack Group Bidding Protocol Crafted Packet DoS
- Index(es):
Relevant Pages
- [NT] Netegrity SiteMinder smpwservicescgi.exe Target Redirection
... The following security advisory is sent to the securiteam mailing list, and can be
found at the SecuriTeam web site: http://www.securiteam.com ... Due to improper filtering
of user provided data, a remote attacker can ... This allows an attacker to redirect
the user to whatever site ... (Securiteam) - [NT] WebArchiveX Unsafe Methods Vulnerability
... The following security advisory is sent to the securiteam mailing list, and can be
found at the SecuriTeam web site: http://www.securiteam.com ... String userAgent,
... scripting' entry, but unfortunately has not changed the version number. ...
(Securiteam) - [NEWS] IBM Net.Data Macro Name Cross-Site Scripting Vulnerability
... The following security advisory is sent to the securiteam mailing list, and can be
found at the SecuriTeam web site: http://www.securiteam.com ... The vulnerability
is caused due to an input validation error in the db2www ... The vendor recommends that
the "DTW_DEFAULT_ERROR_MESSAGE" feature (or ... (Securiteam) - [NEWS] TRUSTe.org Cross Site Scripting and Phishing Opportunities
... The following security advisory is sent to the securiteam mailing list, and can be
found at the SecuriTeam web site: http://www.securiteam.com ... and guidance of many established
companies and industry experts, TRUSTe ... (Securiteam) - [NT] FastStone 4in1 Browser Directory Traversal
... The following security advisory is sent to the securiteam mailing list, and can be
found at the SecuriTeam web site: http://www.securiteam.com ... FastStone 4in1 Browser
does not properly sanitize the directory reference ... (Securiteam)
