CVE-2018-25233 WebDrive 18.00.5057 Denial of Service via Secure WebDAV
MediumCVSS 6.9
EPSS 0.21%
- Published
- Updated
- Exploit status
- No public exploit known
Description
WebDrive 18.00.5057 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the username field during Secure WebDAV connection setup. Attackers can input a buffer-overflow payload of 5000 bytes in the username parameter and trigger a connection test to cause the application to crash.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| WebDrive | = 18.00.5057 | No fix listed |
| southrivertech webdrive | = 18.00.5057 | No fix listed |
References
- ExploitDB-45761 exploit vdb-entry
- Official Product Homepage product
- Product Reference broken-link product
- VulnCheck Advisory: WebDrive 18.00.5057 Denial of Service via Secure WebDAV third-party-advisory