Software602 602Pro LAN SUITE Buffer Overflow Vulnerability

602Pro LAN SUITE is an application that provides connection sharing, as well as e-mail and fax services for networks. Remote administration capabilities exist through an integrated HTTP Server.

A buffer overflow can occur within the remote administration component (webprox.dll) of 602Pro LAN SUITE. Issuing a GET command comprised of approximately 1,059 bytes will cause a buffer overflow condition, allowing arbitrary code to be executed.

Successful exploitation of this vulnerability could lead to a complete compromise of the host.

This vulnerability was addressed in 602Pro LAN SUITE 2000.0.1.33, which is available for download from Software602's Download site.