CVE-2012-1465

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Netmechanica NetDecision HTTP Server 4.5.1 - Remote Buffer Overflow (Metasploit)2012-03-15 · remote · windows · Verified
• Netmechanica NetDecision HTTP Server - Denial of Service2012-02-29 · dos · windows · Verified

Impact

Stack-based buffer overflow in the HTTP Server in NetMechanica NetDecision before 4.6.1 allows remote attackers to cause a denial of service (application crash) via a long URL in an HTTP request. NOTE: some of these details are obtained from third party information.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://osvdb.org/79651
• http://secpod.org/advisories/SecPod_Netmechanica_NetDecision_HTTP_Server_DoS_Vuln.txt
• http://secpod.org/blog/?p=484
• http://secunia.com/advisories/48168
• http://www.exploit-db.com/exploits/18541
• http://www.netmechanica.com/news/?news_id=26
• http://www.securityfocus.com/bid/52194
• http://www.securityfocus.com/bid/52208
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73528
• http://osvdb.org/79651
• http://secpod.org/advisories/SecPod_Netmechanica_NetDecision_HTTP_Server_DoS_Vuln.txt
• http://secpod.org/blog/?p=484
• http://secunia.com/advisories/48168
• http://www.exploit-db.com/exploits/18541
• http://www.netmechanica.com/news/?news_id=26
• http://www.securityfocus.com/bid/52194
• http://www.securityfocus.com/bid/52208
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73528