Description: A vulnerability has been reported in Helix Universal Server, RealServer, and RealSystem Server possibly allowing malicious people to gain system access.
The problem is that "vsrcplin.so.9.0" / "vsrcplin.so.6.0" / "vsrc3260.dll" plugins fails to handle long requests. This may allow malicious people to execute arbitrary code.
Provided and/or discovered by: Dave Aitel, Immunity
Changelog: 2003-08-25: Updated credits. Updated with link to Dave Aitel's advisory.
2003-08-29: Updated the file names due to changes in the original Real advisory.
2003-08-31: Added link to CERT vulnerability note in "Other References" section.
2003-09-15: Added information about updated versions.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
