kcope has discovered a vulnerability in WinGate, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially to compromise a vulnerable system.

The vulnerability is caused due to a boundary error within the WWW Proxy Server. This can be exploited to cause a stack-based buffer overflow via a specially-crafted HTTP request with an overly long URL.

The vulnerability has been confirmed in version 6.1.2.1094, and also reported in version 6.1.1.1077. Other versions may also be affected.

Solution
Update to version 6.1.3 build 1096.
Further details available to Secunia VIM customers

Provided and/or discovered by
kcope

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046646.html

Qbik:
http://forums.qbik.com/viewtopic.php?t=4215

Deep Links
Links available to Secunia VIM customers