PT-2005-1535 · Trackercam · Trackercam

Published 2005-02-19 · Updated 2017-07-11 · CVE-2005-0478

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions TrackerCam versions 5.12 and earlier

Description The issue concerns buffer overflows that can be triggered by remote attackers, potentially leading to a denial of service and possibly the execution of arbitrary code. This can occur through an HTTP request with a long User-Agent header or by passing a long argument to an arbitrary PHP script.

Recommendations For TrackerCam versions 5.12 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-0478

Affected Products

Trackercam

References · 7

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/trackercam_phparg_overflow.rb · Exploit
• 🔥 http://securityfocus.com/archive/1/390918 · Exploit
• 🔥 https://exploit-db.com/exploits/16811 · Exploit
• 🔥 http://securityfocus.com/bid/12592 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0478 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19411 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19409 · Note