PT-2008-5780 · Unknown · Campanel.Dll+1

Rgod · Publicado 2008-10-14 · Atualizado 2017-09-29 · CVE-2008-4548

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RTS Sentry version 2.1.0.2

Description The issue is related to a stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control, which is part of the CamPanel.dll component. This overflow can be triggered by passing a long second argument to the ConnectServer() method, potentially allowing remote attackers to execute arbitrary code.

Recommendations For RTS Sentry version 2.1.0.2, consider disabling the ConnectServer() method in the PTZCamPanelCtrl ActiveX control until a patch is available to prevent potential exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-4548

Produtos afetados

Campanel.Dll

Rts Sentry

Referências · 6

• 🔥 https://exploit-db.com/exploits/4918 · Exploit
• http://secunia.com/advisories/28435 · Aviso do Fabricante
• http://securityfocus.com/bid/27304 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4548 · Nota de Segurança
• http://securityreason.com/securityalert/4411 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39725 · Nota