medium5.0Public exploit code
CVE-2010-1316
Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial of service (daemon crash) or possibly exe…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Tembria Server Monitor 5.6.0 - Denial of Service2010-04-09 · dos · windows · Verified
Impact
Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted (1) GET, (2) PUT, or (3) HEAD request, as demonstrated by a malformed GET request containing a long PATH_INFO to index.asp.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tembria | Server Monitor | through 5.6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/39270
- http://www.corelan.be:8800/advisories.php?id=CORELAN-10-022
- http://www.corelan.be:8800/wp-content/forum-file-uploads/admin1/exploits/corelan_lincoln_tembria.py_.txt
- http://secunia.com/advisories/39270
- http://www.corelan.be:8800/advisories.php?id=CORELAN-10-022
- http://www.corelan.be:8800/wp-content/forum-file-uploads/admin1/exploits/corelan_lincoln_tembria.py_.txt