high7.5Public exploit code

CVE-2006-1148

Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

PeerCast 0.1216 (Linux) - URL Handling Buffer Overflow (Metasploit)2010-09-20 · remote · linux · Verified
PeerCast 0.1216 (Windows x86) - URL Handling Buffer Overflow (Metasploit)2010-09-20 · remote · windows_x86 · Verified
PeerCast 0.1216 - Remote Stack Overflow (Metasploit)2006-03-08 · remote · linux · Verified

Impact

Multiple stack-based buffer overflows in the procConnectArgs function in servmgr.cpp in PeerCast before 0.1217 allow remote attackers to execute arbitrary code via an HTTP GET request with a long (1) parameter name or (2) value in a URL, which triggers the overflow in the nextCGIarg function in servhs.cpp.

Affected products

Vendor	Product	Affected versions
Peercast	Peercast	through 0.1215 Versions 0.1211, 0.1212

Weakness classification

CWE-119

Public exploit code

Impact

Affected products

Weakness classification

References