[MU-200606-01] Real Helix RTSP Server Heap Corruption Vulnerabilities - Updated

[noreply () musecurity com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Real Helix RTSP Server Heap Corruption Vulnerabilities [MU-200606-01]
Updated on June 23, 2006

http://labs.musecurity.com/advisories.html

Affected Product / Versions:

Real Networks Helix DNA Server 11.0.x
Real Networks Helix DNA Server 10.0.x

Product Overview:

The Real Time Streaming Protocol (RTSP) is a protocol which allows a
client to remotely control a streaming media server.  RTSP is
implemented in the Real Helix Server, a cross platform media
streaming server with a wide deployment.

Vulnerability Details:

A remote buffer overflow condition in Real Helix's RTSP service could
allow for arbitrary code execution.  The vulnerable code is triggered
with the use of a malformed User-Agent header.

A second vulnerability of equal criticality was also discovered.
This bug involved the parsing of HTTP URL schemes.

Vendor Response / Solution:

Mu Security would like to thank Real for timely remediation of these
vulnerabilities.

Helix DNA Server Version 11.1 can be downloaded at:
https://helix-server.helixcommunity.org/2005/devdocs/builds

History:

06-22-06: Initial release.
06-23-06: Added more information about vulnerabilities and patch.

Credit:

This vulnerability was discovered by the Mu Security research team.

http://labs.musecurity.com/pgpkey.txt

Mu Security is an early-stage innovator creating a new class of
security analysis system. The company's mission is to widely deploy
security analysis and reduce product and application vulnerabilities.
 Mu's founders include industry-recognized  experts in the IDP, open
source protocol analysis tools, ethical hacking, and network
management markets The security analysis process and product solution
provide a rigorous and streamlined methodology for verifying and
improving the security readiness of any IP-based product or
application.  Mu Security, headquartered in Sunnyvale, California, is
backed by preeminent venture capital firms including Accel Partners
and Benchmark Capital.

The information within this paper may change without notice. Use of
this information constitutes acceptance for use in an AS IS
condition. There are no warranties, implied or express, with regard
to this information. In no event shall the author be liable for any
direct or indirect damages whatsoever arising out of or in connection
with the use or spread of this information. Any use of this
information is at the user's own risk.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (Darwin)

iD8DBQFEnHHuMl+docYeP+YRAtvIAJ9fKZEwWls7WarEeJnXZa+3sweUPQCgiErH
mLQK0VvqACLGsnPykAYzL8U=
=f2qz
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/