Zilab Chat and Instant Messaging (ZIM) Server Multiple Vulnerabilities

Bugtraq ID:	27940
Class:	Boundary Condition Error
CVE:	CVE-2008-5280 CVE-2008-5279
Remote:	Yes
Local:	No
Published:	Feb 21 2008 12:00AM
Updated:	Jul 05 2016 10:00PM
Credit:	Luigi Auriemma is credited with the discovery of these vulnerabilities.
Vulnerable:	Zilab Software Zilab Chat and Instant Messaging (ZIM) Server 2.1 Zilab Software Zilab Chat and Instant Messaging (ZIM) Server 2.0
Not Vulnerable:

Zilab Chat and Instant Messaging (ZIM) Server Multiple Vulnerabilities

Zilab Chat and Instant Messaging (ZIM) Server is prone to multiple vulnerabilities, including denial-of-service issues and memory-corruption issues.

A successful exploit may allow remote attackers to execute arbitrary code in the context of the affected software and/or cause denial-of-service conditions.

These issues affect ZIM Server 2.0 and 2.1; other versions may also be affected.

Zilab Chat and Instant Messaging (ZIM) Server Multiple Vulnerabilities

The following exploit code is available:

• /data/vulnerabilities/exploits/zilabzcsx.zip

Zilab Chat and Instant Messaging (ZIM) Server Multiple Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Zilab Chat and Instant Messaging (ZIM) Server Multiple Vulnerabilities

References:

• Zilab Chat and Instant Messaging (ZIM) Serve (Zilab Software)
  
• Zilab Chat and Instant Messaging (ZIM) (Luigi Auriemma)