Buffer overflow in raydium_network_read function in network.c in Raydium SVN revision 312 and earlier allows remote attackers to execute arbitrary code by sending packets with long global variables to the client.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Raydium | Raydium | svn_revision_283 (including) | svn_revision_283 (including) |
| Raydium | Raydium | svn_revision_284 (including) | svn_revision_284 (including) |
| Raydium | Raydium | svn_revision_285 (including) | svn_revision_285 (including) |
| Raydium | Raydium | svn_revision_286 (including) | svn_revision_286 (including) |
| Raydium | Raydium | svn_revision_287 (including) | svn_revision_287 (including) |
| Raydium | Raydium | svn_revision_288 (including) | svn_revision_288 (including) |
| Raydium | Raydium | svn_revision_289 (including) | svn_revision_289 (including) |
| Raydium | Raydium | svn_revision_290 (including) | svn_revision_290 (including) |
| Raydium | Raydium | svn_revision_291 (including) | svn_revision_291 (including) |
| Raydium | Raydium | svn_revision_292 (including) | svn_revision_292 (including) |
| Raydium | Raydium | svn_revision_293 (including) | svn_revision_293 (including) |
| Raydium | Raydium | svn_revision_294 (including) | svn_revision_294 (including) |
| Raydium | Raydium | svn_revision_295 (including) | svn_revision_295 (including) |
| Raydium | Raydium | svn_revision_296 (including) | svn_revision_296 (including) |
| Raydium | Raydium | svn_revision_297 (including) | svn_revision_297 (including) |
| Raydium | Raydium | svn_revision_298 (including) | svn_revision_298 (including) |
| Raydium | Raydium | svn_revision_299 (including) | svn_revision_299 (including) |
| Raydium | Raydium | svn_revision_300 (including) | svn_revision_300 (including) |
| Raydium | Raydium | svn_revision_301 (including) | svn_revision_301 (including) |
| Raydium | Raydium | svn_revision_302 (including) | svn_revision_302 (including) |
| Raydium | Raydium | svn_revision_303 (including) | svn_revision_303 (including) |
| Raydium | Raydium | svn_revision_304 (including) | svn_revision_304 (including) |
| Raydium | Raydium | svn_revision_305 (including) | svn_revision_305 (including) |
| Raydium | Raydium | svn_revision_306 (including) | svn_revision_306 (including) |
| Raydium | Raydium | svn_revision_307 (including) | svn_revision_307 (including) |
| Raydium | Raydium | svn_revision_308 (including) | svn_revision_308 (including) |
| Raydium | Raydium | svn_revision_309 (including) | svn_revision_309 (including) |
| Raydium | Raydium | svn_revision_310 (including) | svn_revision_310 (including) |
| Raydium | Raydium | svn_revision_311 (including) | svn_revision_311 (including) |
| Raydium | Raydium | svn_revision_312 (including) | svn_revision_312 (including) |
References
- http://aluigi.altervista.org/adv/raydiumx-adv.txt
- http://secunia.com/advisories/20097
- http://securityreason.com/securityalert/900
- http://www.securityfocus.com/archive/1/433930/100/0/threaded
- http://www.securityfocus.com/bid/17986
- http://www.vupen.com/english/advisories/2006/1808
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26516
- http://aluigi.altervista.org/adv/raydiumx-adv.txt
- http://secunia.com/advisories/20097
- http://securityreason.com/securityalert/900
- http://www.securityfocus.com/archive/1/433930/100/0/threaded
- http://www.securityfocus.com/bid/17986
- http://www.vupen.com/english/advisories/2006/1808
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26516