Secunia Research: Sterling Trader Data Processing Buffer Overflow Vulnerability

======================================================================

                 Secunia Research 13/12/2011

• Sterling Trader Data Processing Buffer Overflow Vulnerability -

======================================================================
Table of Contents

Affected Software…1
Severity…2
Vendor's Description of Software…3
Description of Vulnerability…4
Solution…5
Time Table…6
Credits…7
References…8
About Secunia…9
Verification…10

======================================================================
1) Affected Software

• Sterling Trader 7.0.2

NOTE: Other versions may also be affected.

======================================================================
2) Severity

Rating: Moderately critical
Impact: System access
Where: From local network

======================================================================
3) Vendor's Description of Software

"Sterling Trader is a broker-neutral, independent service bureau
providing advanced trading software and global network technology to
financial institutions and professional traders around the world. Our
state of the art computer network and innovative trading tools make
Sterling Trader the broker network of choice."

Product Link:
http://www.sterlingtrader.com/

======================================================================
4) Description of Vulnerability

Secunia Research has discovered a vulnerability in Sterling Trader,
which can be exploited by malicious people to compromise a vulnerable
system.

The vulnerability is caused due to a boundary error in Base.exe when
processing network requests (code 176). This can be exploited to cause
a stack-based buffer overflow via a specially crafted packet sent to
a certain TCP port.

Successful exploitation allows execution of arbitrary code, but
requires guessing the TCP port, which is dynamically assigned.

======================================================================
5) Solution

Restrict access to trusted hosts only.

======================================================================
6) Time Table

25/11/2011 - Requested security contact.
06/12/2011 - 2nd request for a security contact.
13/12/2011 - Public disclosure.

======================================================================
7) Credits

Discovered by Dmitriy Pletnev, Secunia Research.

======================================================================
8) References

The Common Vulnerabilities and Exposures (CVE) project has assigned
CVE-2011-3842 for the vulnerability.

======================================================================
9) About Secunia

Secunia offers vulnerability management solutions to corporate
customers with verified and reliable vulnerability intelligence
relevant to their specific system configuration:

http://secunia.com/advisories/business_solutions/

Secunia also provides a publicly accessible and comprehensive advisory
database as a service to the security community and private
individuals, who are interested in or concerned about IT-security.

http://secunia.com/advisories/

Secunia believes that it is important to support the community and to
do active vulnerability research in order to aid improving the
security and reliability of software in general:

http://secunia.com/secunia_research/

Secunia regularly hires new skilled team members. Check the URL below
to see currently vacant positions:

http://secunia.com/corporate/jobs/

Secunia offers a FREE mailing list called Secunia Security Advisories:

http://secunia.com/advisories/mailing_lists/

======================================================================
10) Verification

Please verify this advisory by visiting the Secunia website:
http://secunia.com/secunia_research/2011-83/

Complete list of vulnerability reports published by Secunia Research:
http://secunia.com/secunia_research/

======================================================================