Main Vulnerability Database Vulnerabilities #VU6594

Buffer overflow in gSOAP - #VU6594

Published: October 24, 2011 / Updated: May 17, 2017

Vulnerability identifier: #VU6594

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: N/A

CWE-ID: CWE-119

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote authenticated attacker to execute arbitrary code on the target system.

The vulnerability exists due to boundary error when processing SOAP requests. A remote authenticated attacker can send a specially crafted SOAP request to vulnerable device and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable device.

Affected software

gSOAP

Remediation

Update to the latest version.

External References

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/sap/sap_mgmt_con_o...
https://www.cs.fsu.edu/~engelen/soapbugs.html

Related Security Bulletins