CVE-2004-2086 Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an H...
MediumCVSS 5.0
EPSS 75.5%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in results.stm for Sambar Server before the 6.0 production release allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a long query parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sambar server | = 6.0 | No fix listed |
| sambar server | = 6.0-beta3 | No fix listed |
References
- 1008979 exploit vdb-entry vendor-advisory
- 5786 patch vdb-entry vendor-advisory
- www.sambar.com patch vendor-advisory
- 20040207 Sambar 6.0 stack overflow exploit mailing-list vendor-advisory
- 9607 exploit vdb-entry vendor-advisory
- sambar-http-post-bo(15071) vdb-entry