|
||
| Editor Login | Register | ||
| > World > Security |
|
|
| BigAnt Messenger AntServer Module HTTP Request Buffer Overflow | ||||||||||||||||||||||||
Matteo Memelli has discovered a vulnerability in BigAnt Messenger, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a boundary error in the AntServer Module (AntServer.exe) and can be exploited to cause a stack-based buffer overflow e.g. by sending a specially crafted, overly long HTTP GET request to default port 6080/TCP. Successful exploitation allows execution of arbitrary code. The vulnerability is confirmed in version 2.2. Other versions may also be affected. Solution: Restrict network access to the AntServer Module. Provided and/or discovered by: Matteo Memelli Original Advisory: http://milw0rm.com/exploits/5451 | ||||||||||||||||||||||||
|
| Bağlantılar: bilgininefendisi.net |
| Open Source Document Project | AUP&TOS |
