BigAnt IM Server Multiple Security Vulnerabilities
BID:57214
Info
BigAnt IM Server Multiple Security Vulnerabilities
| Bugtraq ID: | 57214 |
| Class: | Unknown |
| CVE: |
CVE-2012-6273 CVE-2012-6274 CVE-2012-6275 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 09 2013 12:00AM |
| Updated: | Apr 02 2013 03:37PM |
| Credit: | Hamburgers Maccoy |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
BigAnt IM Server Multiple Security Vulnerabilities
BigAnt IM Server is prone to multiple security vulnerabilities including:
1. An SQL-injection vulnerability
2. A security bypass vulnerability
3. A stack-based buffer-overflow vulnerability
An attacker can exploit these vulnerabilities to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, execute arbitrary code with the privileges of the application, or bypass certain security restrictions. Failed attacks will cause denial-of-service conditions.
BigAnt IM Server is prone to multiple security vulnerabilities including:
1. An SQL-injection vulnerability
2. A security bypass vulnerability
3. A stack-based buffer-overflow vulnerability
An attacker can exploit these vulnerabilities to compromise the application, access or modify data, exploit latent vulnerabilities in the underlying database, execute arbitrary code with the privileges of the application, or bypass certain security restrictions. Failed attacks will cause denial-of-service conditions.
Exploit / POC
BigAnt IM Server Multiple Security Vulnerabilities
The following example exploit code are available:
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
The following example exploit code are available:
Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
BigAnt IM Server Multiple Security Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
BigAnt IM Server Multiple Security Vulnerabilities
References:
References:
- BigAnt Office Messenger Homepage (BigAnt)