Buffer overflow in gSOAP - #VU6594

 

Buffer overflow in gSOAP - #VU6594

Published: October 24, 2011 / Updated: May 17, 2017


Vulnerability identifier: #VU6594
CSH Severity: Medium
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:A/U:Green
CVE-ID: N/A
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vendor: Genivia Inc
Affected software:
gSOAP

Detailed vulnerability description

The vulnerability allows a remote authenticated attacker to execute arbitrary code on the target system.

The vulnerability exists due to boundary error when processing SOAP requests. A remote authenticated attacker can send a specially crafted SOAP request to vulnerable device and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable device.

Remediation

Update to the latest version.

Sources