Armassa ARD-9808 Information Disclosure and Buffer Overflow Vulnerabilities

Bugtraq ID:	43788
Class:	Unknown
CVE:	CVE-2009-2305 CVE-2009-2306
Remote:	Yes
Local:	No
Published:	Jul 01 2009 12:00AM
Updated:	Jul 01 2009 12:00AM
Credit:	Septemb0x and Stack
Vulnerable:
Not Vulnerable:

Armassa ARD-9808 Information Disclosure and Buffer Overflow Vulnerabilities

Armassa ARD-9808 is prone to an information-disclosure vulnerability and a buffer-overflow vulnerability.

Successful exploits can allow attackers to obtain sensitive information or to execute arbitrary code in the context of the affected device's webserver. Failed attempts may lead to a denial-of-service condition.

Armassa ARD-9808 Information Disclosure and Buffer Overflow Vulnerabilities

The following example URI and proof-of-concept are available:

http://www.example.com/dvr.ini

• /data/vulnerabilities/exploits/43788.py

Armassa ARD-9808 Information Disclosure and Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Armassa ARD-9808 Information Disclosure and Buffer Overflow Vulnerabilities

References:

• ARD-9808 Product Page (Armassa)