vendor:
Pserv
by:
Sapient2003
7.5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: Pserv
Affected Version From: Pserv 2.0 Beta 1
Affected Version To: Pserv 2.0 Beta 5
Patch Exists: YES
Related CWE: N/A
CPE: a:pserv:pserv
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Linux
2003
Buffer Overflow Vulnerability in Pserv
A buffer overflow vulnerability has been reported in Pserv. The buffer overflow condition is due to the way Pserv handles data streams from remote connections. An attacker can exploit this vulnerability by issuing a HTTP request with an overly long GET request for a document. Due to insufficient buffers being allocated when processing the data, it may be possible to corrupt sensitive memory on the system stack.
Mitigation:
Ensure that all input is properly validated and sanitized before being processed.