Cogent Real-Time Systems DataHub Remote Heap Buffer Overflow Vulnerability
BID:63397
Info
Cogent Real-Time Systems DataHub Remote Heap Buffer Overflow Vulnerability
| Bugtraq ID: | 63397 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 29 2013 12:00AM |
| Updated: | Mar 19 2015 09:30AM |
| Credit: | Pawel Wylecial |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Cogent Real-Time Systems DataHub Remote Heap Buffer Overflow Vulnerability
Cogent Real-Time Systems DataHub is prone to a remote heap-based buffer-overflow vulnerability.
Attackers may be able to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
Versions prior to Cogent DataHub 7.3.4 are vulnerable.
Cogent Real-Time Systems DataHub is prone to a remote heap-based buffer-overflow vulnerability.
Attackers may be able to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.
Versions prior to Cogent DataHub 7.3.4 are vulnerable.
Exploit / POC
Cogent Real-Time Systems DataHub Remote Heap Buffer Overflow Vulnerability
An attacker can exploit this issue through readily available tools.
An attacker can exploit this issue through readily available tools.
Solution / Fix
Cogent Real-Time Systems DataHub Remote Heap Buffer Overflow Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cogent Real-Time Systems DataHub Remote Heap Buffer Overflow Vulnerability
References:
References:
- Cogent DataHub Heap Overflow Remote Code Execution Vulnerability (ZDI)
- Cogent DataHub HomePage (Cogent Real-Time Systems Inc)
- DataHub 7.3.4 Release Notes (Cogent Real-Time Systems Inc)