The RealNetworks' Helix Universal Server supports delivery of several different media types over the Internet. Vulnerabilities have been discovered in the way it handles some requests from the network. These vulnerabilities could allow a remote attacker to execute arbitrary code on vulnerable systems.
"By making two HTTP requests (port 80) containing long URI's simultaneously, (in making the first connection, it will appear to hang, by keeping this session open and making another connection and supplying the same request again ), will cause the saved return address to also be overwritten, allowing an attacker to run arbitrary code of their choosing."
A remote attacker may be able to execute arbitrary code on the vulnerable system. This attacker-supplied code would be run with the privileges of the user running the Helix Server.
Apply a patch from the vendor
Thanks to Mark Litchfield of NGSSoftware Insight Security Research for reporting this vulnerability.
This document was written by Chad R Dougherty.
|Date First Published:||2003-04-17|
|Date Last Updated:||2003-04-17 18:04 UTC|