Patrick Webster has reported a vulnerability in Tumbleweed SecureTransport, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the SecureTransport FileTransfer ActiveX Control (e.g. vcst_eu.dll, vcst_en.dll) when handling arguments to the "TransferFile()" method. This can be exploited to cause a stack-based buffer overflow by passing an overly long "remoteFile" string to the affected method.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in vcst_eu.dll version 1.0.0.5. Other versions may also be affected.

Solution
Reportedly fixed in SecureTransport Server 4.6.1 Hotfix 20.

Provided and/or discovered by
Patrick Webster

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.aushack.com/200708-tumbleweed.txt

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers