Published: 10/03/2006 Updated: 18/10/2018

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 765

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast prior to 0.1217 allow remote malicious users to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the nextCGIarg function in servhs.cpp.

Vulnerable Product	Search on Vulmon	Subscribe to Product
peercast peercast
peercast peercast 0.1211
peercast peercast 0.1212

## # $Id: peercast_urlrb 10394 2010-09-20 08:06:27Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Me ...

## # $Id$ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote include Ms ...

CWE-119 http://www.infigo.hr/in_focus/INFIGO-2006-03-01 http://www.peercast.org/forum/viewtopic.php?t=3346 http://www.securityfocus.com/bid/17040 http://security.gentoo.org/glsa/glsa-200603-17.xml http://www.osvdb.org/23777 http://secunia.com/advisories/19169 http://secunia.com/advisories/19291 http://www.vupen.com/english/advisories/2006/0900 https://exchange.xforce.ibmcloud.com/vulnerabilities/25113 http://www.securityfocus.com/archive/1/427160/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/16855/

CVE-2006-1148

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect