A vulnerability has been reported in ArcSDE, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the ArcSDE service when using three tiered ArcSDE configurations. This can be exploited to cause a stack-based buffer overflow via a specially crafted connection packet containing an overly long string sent to the ArcSDE service (by default port 5151/tcp).

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in versions 8.3, 9.0, 9.1, and 9.2.

Solution
The vendor has issued patches for various platforms (see vendor advisories for details).

Provided and/or discovered by
Discovered by an anonymous person and reported via iDefense Labs.

Changelog
Further details available to Secunia VIM customers

Original Advisory
ESRI ArcSDE 8.3:
http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1260

ESRI ArcSDE 9.0:
http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1261

ESRI ArcSDE 9.1:
http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1262

ESRI ArcSDE 9.2:
http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=66&MetaID=1259

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=507

Deep Links
Links available to Secunia VIM customers