high7.5Public exploit code
CVE-2014-4158
Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET request.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Kolibri Web Server 2.0 - GET (SEH)2014-07-14 · remote · windows · Verified
- Kolibri Web Server 2.0 - GET Stack Buffer Overflow2014-04-25 · remote · windows · Verified
Impact
Stack-based buffer overflow in Kolibri 2.0 allows remote attackers to execute arbitrary code via a long URI in a GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Senkas | Kolibri | Version 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/show/osvdb/108090
- http://osvdb.org/show/osvdb/70808
- http://packetstormsecurity.com/files/126332/Kolibri-2.0-Stack-Buffer-Overflow.html
- http://www.exploit-db.com/exploits/33027
- http://www.exploit-db.com/exploits/34059
- http://www.securityfocus.com/bid/68195
- http://osvdb.org/show/osvdb/108090
- http://osvdb.org/show/osvdb/70808
- http://packetstormsecurity.com/files/126332/Kolibri-2.0-Stack-Buffer-Overflow.html
- http://www.exploit-db.com/exploits/33027
- http://www.exploit-db.com/exploits/34059
- http://www.securityfocus.com/bid/68195