5
CVSSv2

CVE-2005-2041

Published: 15/06/2005 Updated: 11/07/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote malicious users to execute arbitrary code via a long ViRobot_ID cookie (HTTP_COOKIE).

Vulnerable Product Search on Vulmon Subscribe to Product

hauri virobot linux server 2.0

Exploits

#!/usr/bin/perl # ViRobot 20 remote cookie exploit - ala addschup # copyright Kevin Finisterre kf_lists[at]digitalmunition[dot]com # # jdam:/home/kfinisterre# ls -al /var/spool/cron/root # ls: /var/spool/cron/root: No such file or directory # jdam:/home/kfinisterre# ls -al /var/spool/cron/root # -rw-r--r-- 1 root staff 104 2005-01-23 14:43 /var/s ...