Savant Webserver cgitest.exe Denial Of Service Vulnerability
BID:5706
Info
Savant Webserver cgitest.exe Denial Of Service Vulnerability
| Bugtraq ID: | 5706 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 13 2002 12:00AM |
| Updated: | Sep 13 2002 12:00AM |
| Credit: | Discovery credited to Auriemma Luigi of PivX Solutions. |
| Vulnerable: |
Savant Savant Webserver 3.1 |
| Not Vulnerable: | |
Discussion
Savant Webserver cgitest.exe Denial Of Service Vulnerability
Savant Webserver is prone to a buffer overflow condition in the "cgitest.exe" file, that results in a denial of service. This condition may also potentially be exploited to corrupt memory with attacker-supplied data, which may result in execution of arbitrary code with the privileges of the webserver.
Savant Webserver is prone to a buffer overflow condition in the "cgitest.exe" file, that results in a denial of service. This condition may also potentially be exploited to corrupt memory with attacker-supplied data, which may result in execution of arbitrary code with the privileges of the webserver.
Exploit / POC
Savant Webserver cgitest.exe Denial Of Service Vulnerability
No exploit code is required to cause a denial of service.
A proof-of-concept supplied by Auriemma Luigi is reportedly located here:
http://www.pivx.com/luigi/poc/savant-cgitest.txt
No exploit code is required to cause a denial of service.
A proof-of-concept supplied by Auriemma Luigi is reportedly located here:
http://www.pivx.com/luigi/poc/savant-cgitest.txt