Secunia

A vulnerability has been reported in Open Text Search Server, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the STRlib.dll library used by the Hummingbird STR service (STRsvc.exe). This can be exploited to cause a stack-based buffer overflow via a specially crafted packet sent to TCP port 10500.

Successful exploitation may allow execution of arbitrary code.

Solution
Update to version 6.0 or 6.1 and apply patches. For more information consult Open Text Knowledge Base article 14816981.

Provided and/or discovered by
Stephen Fewer of Harmony Security, reported via ZDI

Original Advisory
ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-09-074/

Deep Links
Links available in Customer Area