WinGate 6.x buffer overflow vulnerability

[CPA3Y]

Hello, all
interesting news from security analitics about WinGate:
http://www.security.nnov.ru/Ndocument13.html

[genie]

Aye, we have been notified about this exploit and are working on the fix - the patched version will be available shortly. Meanwhile, this exploit is dangerous mostly for those who have WWW proxy opened on the external interface - which is not a good practice anyway - or for those with ... erm... less than well-behaving employees internally. Anyway, the fixed version will be available shortly.

[adrien]

Hi All

We have released a fix today. The problem was related to the DNS resolver, not the WWW proxy. It was discovered in the WWW proxy using requests containing extremely large hostnames, however large hostnames are also able to be submitted potentially with other services, including the POP3, Telnet, and (unconfirmed - pre-processing reduces vulnerability here) SMTP server.

The DNS resolver has been in WinGate since 5.0, so we recommend anyone using WinGate version 5.0 or later upgrade to 6.1.3 as soon as possible.

Regards

Adrien