MyServer Multiple Remote math_sum.mscgi Example Script Vulnerabilities
BID:10831
Info
MyServer Multiple Remote math_sum.mscgi Example Script Vulnerabilities
| Bugtraq ID: | 10831 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 30 2004 12:00AM |
| Updated: | Jul 30 2004 12:00AM |
| Credit: | Discovery of these issues is credited to [email protected]. |
| Vulnerable: |
myServer myServer 0.6.2 |
| Not Vulnerable: | |
Discussion
MyServer Multiple Remote math_sum.mscgi Example Script Vulnerabilities
Reportedly MyServer is affected by multiple remote vulnerabilities in the 'math_sum.mscgi' example script. These issues are due to a boundary condition error and a failure to properly sanitize user-supplied URI input.
An attacker could exploit the boundary condition issue to execute arbitrary code on the affected computer with the privileges of the user that started the affected application. The input validation issue could be leveraged to carry out cross-site scripting attacks against the affected computer.
These issues are reported to affect MyServer version 0.6.2, it is likely other versions are also affected.
Reportedly MyServer is affected by multiple remote vulnerabilities in the 'math_sum.mscgi' example script. These issues are due to a boundary condition error and a failure to properly sanitize user-supplied URI input.
An attacker could exploit the boundary condition issue to execute arbitrary code on the affected computer with the privileges of the user that started the affected application. The input validation issue could be leveraged to carry out cross-site scripting attacks against the affected computer.
These issues are reported to affect MyServer version 0.6.2, it is likely other versions are also affected.
Exploit / POC
MyServer Multiple Remote math_sum.mscgi Example Script Vulnerabilities
The following proof of concept exploits have been provided:
cross-site scripting issue:
http://www.example.com/cgi-bin/math_sum.mscgi?a=[code]&b=[code]
buffer overflow issue:
http://www.example.com/cgi-bin/math_sum.mscgi?a=[AAA...x86...AAA]
denial of service issue:
http://www.example.com/cgi-bin/math_sum.mscgi?a=<script>alert(document.cookie)</script>&b=
The following proof of concept exploits have been provided:
cross-site scripting issue:
http://www.example.com/cgi-bin/math_sum.mscgi?a=[code]&b=[code]
buffer overflow issue:
http://www.example.com/cgi-bin/math_sum.mscgi?a=[AAA...x86...AAA]
denial of service issue:
http://www.example.com/cgi-bin/math_sum.mscgi?a=<script>alert(document.cookie)</script>&b=
Solution / Fix
MyServer Multiple Remote math_sum.mscgi Example Script Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
MyServer Multiple Remote math_sum.mscgi Example Script Vulnerabilities
References:
References: