Sysax Multi Server 'Content-Disposition' Buffer Overflow Vulnerability

Bugtraq ID:	51548
Class:	Boundary Condition Error
CVE:	CVE-2012-6530
Remote:	Yes
Local:	No
Published:	Jan 18 2012 12:00AM
Updated:	Mar 19 2015 07:35AM
Credit:	Craig Freyman
Vulnerable:	Codeorigin Sysax Multi Server 5.50 Codeorigin Sysax Multi Server 5.25 Codeorigin Sysax Multi Server 4.3
Not Vulnerable:	Codeorigin Sysax Multi Server 5.52

Sysax Multi Server 'Content-Disposition' Buffer Overflow Vulnerability

Sysax Multi Server is prone to a buffer-overflow vulnerability.

An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application. Failed exploit attempts will result in a denial-of-service condition.

Sysax Multi Server 5.50 is vulnerable; prior versions may also be affected.

Sysax Multi Server 'Content-Disposition' Buffer Overflow Vulnerability

An attacker can use readily available network tools to exploit these issues.

The following exploit examples are available:

• /data/vulnerabilities/exploits/51548.py
• /data/vulnerabilities/exploits/51548.rb

Sysax Multi Server 'Content-Disposition' Buffer Overflow Vulnerability

Solution:
The vendor released an update. Please see the references for more information.

Sysax Multi Server 'Content-Disposition' Buffer Overflow Vulnerability

References:

• Sysax Multi Server 5.50 Exploit (Craig Freyman)
  
• Sysax Multi Server Homepage (Codeorigin)