HP DataDirect OpenAccess GIOP Parsing Remote Code Execution VulnerabilityZDI-12-089: June 6th, 2012
TippingPoint™ IPS Customer ProtectionTippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID 12363. For further product information on the TippingPoint IPS:
This vulnerability allows remote attackers to execute arbitrary code on vulnerable applications using DataDirect's SequeLink. Authentication is not required to exploit this vulnerability.
The specific flaw exists within how the application processes GIOP packets. When processing a specific GIOP packet, the application will trust a size field in the packet. The application will use this size in a copy operation into a statically sized buffer which can cause a buffer overflow. This can lead to code execution under the context of the service.
Vendor ResponseHewlett-Packard has issued an update to correct this vulnerability. More details can be found at:
2011-06-01 - Vulnerability reported to vendor
2012-06-06 - Coordinated public release of advisory
CreditThis vulnerability was discovered by: