CVE-2012-10058 RabidHamster R4 Log Entry sprintf() Buffer Overflow
CriticalCVSS 10.0
EPSS 2.2%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
RabidHamster R4 v1.25 contains a stack-based buffer overflow vulnerability due to unsafe use of sprintf() when logging malformed HTTP requests. A remote attacker can exploit this flaw by sending a specially crafted URI, resulting in arbitrary code execution under the context of the web server process.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rabidhamster R4 Embedded Server | = 1.25 | No fix listed |
References
- raw.githubusercontent.com exploit
- www.exploit-db.com exploit
- aluigi.altervista.org exploit technical-description
- advisories.checkpoint.com third-party-advisory
- www.rabidhamster.org product
- www.vulncheck.com third-party-advisory