CVE-2004-1208 Buffer overflow in Orbz 2.10 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long password field in a join request.
HighCVSS 10.0
EPSS 7.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in Orbz 2.10 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long password field in a join request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 21-6 productions orbz | = 2.5 | No fix listed |
| 21-6 productions orbz | = 2.6 | No fix listed |
| 21-6 productions orbz | = 2.7 | No fix listed |
| 21-6 productions orbz | = 2.8 | No fix listed |
| 21-6 productions orbz | = 2.9 | No fix listed |
| 21-6 productions orbz | = 2.10 | No fix listed |
References
- 20041129 Buffer-overflow in Orbz 2.10 mailing-list
- 11774 exploit vdb-entry vendor-advisory
- orbz-join-password-bo(18298) vdb-entry