1. Skip to navigation
  2. Skip to content
  3. Skip to secondary-content




ServerView Web Interface Buffer Overflow Vulnerabilities

Report ID: SA30913
Source: Secunia
Date of Discovery: 04.07.2008
Criticality: Moderate
Affects:
ServerView 4.x

Compromise From: From local network
Compromise Type: System access

Summary

Some vulnerabilities have been reported in ServerView, which can be exploited by malicious people to compromise a vulnerable system.

Detailed Description

Some vulnerabilities have been reported in ServerView, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerabilities are caused due to boundary errors within certain components of the ServerView web interface (e.g. SnmpGetMibValues.exe) and can be exploited to cause stack-based buffer overflows via a specially crafted URL.

Successful exploitation allows execution of arbitrary code.

The vulnerabilities are reported in version 4.60.07. Other versions may also be affected.

Solution

Restrict network access to the web interface.