G-WAN Buffer Overflow Vulnerability and Denial of Service Vulnerability
BID:50108
Info
G-WAN Buffer Overflow Vulnerability and Denial of Service Vulnerability
| Bugtraq ID: | 50108 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 13 2011 12:00AM |
| Updated: | Oct 13 2011 12:00AM |
| Credit: | Fredrik Widlund |
| Vulnerable: |
TrustLeap G-WAN 2.10.6 |
| Not Vulnerable: | |
Discussion
G-WAN Buffer Overflow Vulnerability and Denial of Service Vulnerability
G-WAN is prone to a buffer-overflow vulnerability and a denial-of-service vulnerability.
Remote attackers can exploit these issues to execute arbitrary code in the context of the application or crash the affected application.
G-WAN 2.10.6 is vulnerable; other versions may also be affected.
G-WAN is prone to a buffer-overflow vulnerability and a denial-of-service vulnerability.
Remote attackers can exploit these issues to execute arbitrary code in the context of the application or crash the affected application.
G-WAN 2.10.6 is vulnerable; other versions may also be affected.
Exploit / POC
G-WAN Buffer Overflow Vulnerability and Denial of Service Vulnerability
The following proof of concept is available:
while: do echo -e "GET /aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\r\n\r\n'
The following proof of concept is available:
while: do echo -e "GET /aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\r\n\r\n'
References
G-WAN Buffer Overflow Vulnerability and Denial of Service Vulnerability
References:
References:
- G-WAN Homepage (Trustleap)
- [email protected]: Multiple G-WAN vulnerabilities ( Fredrik Widlund