Description
Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated users to cause a denial of service (HTTPS service outage) via a crafted query string in an HTTPS request to (1) adLog.cgi, (2) post.cgi, or (3) ad.cgi, related to the "files filter."
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://www.exploit-db.com/exploits/4426 ↗
- http://www.securityfocus.com/bid/25715 ↗
- http://www.vupen.com/english/advisories/2007/3226 ↗
- http://www.sybsecurity.com/advisors/SYBSEC-ADV01-Airsensor_M520_HTTPD_Remote_Preauth_Denial_Of_Service_and_Buffer_Overflow_PoC ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36691 ↗
- http://secunia.com/advisories/26869 ↗