Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbitrary code via a long ViRobot_ID cookie (HTTP_COOKIE).
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Virobot_linux_server | Hauri | 2.0 (including) | 2.0 (including) |
References
- http://marc.info/?l=full-disclosure\u0026m=111880273631392\u0026w=2
- http://secunia.com/advisories/15700
- http://www.digitalmunition.com/DMA%5B2005-0614a%5D.txt
- http://www.globalhauri.com/html/download/down_unixpatch.html
- http://www.osvdb.org/17320
- http://www.securiteam.com/exploits/5TP0C1FG1I.html
- http://www.securityfocus.com/bid/12964
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21000
- http://marc.info/?l=full-disclosure\u0026m=111880273631392\u0026w=2
- http://secunia.com/advisories/15700
- http://www.digitalmunition.com/DMA%5B2005-0614a%5D.txt
- http://www.globalhauri.com/html/download/down_unixpatch.html
- http://www.osvdb.org/17320
- http://www.securiteam.com/exploits/5TP0C1FG1I.html
- http://www.securityfocus.com/bid/12964
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21000