PT-2007-6141 · Airdefense · Airdefense Airsensor M520

Alex Hernandez · Publicado 2007-09-24 · Atualizado 2017-09-29 · CVE-2007-5036

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions AirDefense Airsensor M520 versions 4.3.1.1 through 4.4.1.4

Description The issue is related to multiple buffer overflows that can be triggered by remote authenticated users, leading to a denial of service (HTTPS service outage). This can be achieved by sending a crafted query string in an HTTPS request to specific API endpoints, including (1) "adLog.cgi", (2) "post.cgi", or (3) "ad.cgi", which are related to the "files filter."

Recommendations For AirDefense Airsensor M520 versions 4.3.1.1 through 4.4.1.4, consider restricting access to the affected API endpoints "adLog.cgi", "post.cgi", and "ad.cgi" to minimize the risk of exploitation until a patch is available. Avoid using crafted query strings in HTTPS requests to these endpoints.

Exploit

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-20

CWE-119

Identificadores relacionados

CVE-2007-5036

Produtos afetados

Airdefense Airsensor M520

Referências · 7

• 🔥 https://exploit-db.com/exploits/4426 · Exploit
• 🔥 http://sybsecurity.com/advisors/SYBSEC-ADV01-Airsensor_M520_HTTPD_Remote_Preauth_Denial_Of_Service_and_Buffer_Overflow_PoC · Exploit
• 🔥 http://secunia.com/advisories/26869 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36691 · Nota
• http://vupen.com/english/advisories/2007/3226 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5036 · Nota de Segurança
• http://securityfocus.com/bid/25715 · Nota