PT-2007-6141 · Airdefense · Airdefense Airsensor M520

Alex Hernandez · Published 2007-09-24 · Updated 2017-09-29 · CVE-2007-5036

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions AirDefense Airsensor M520 versions 4.3.1.1 through 4.4.1.4

Description The issue is related to multiple buffer overflows that can be triggered by remote authenticated users, leading to a denial of service (HTTPS service outage). This can be achieved by sending a crafted query string in an HTTPS request to specific API endpoints, including (1) "adLog.cgi", (2) "post.cgi", or (3) "ad.cgi", which are related to the "files filter."

Recommendations For AirDefense Airsensor M520 versions 4.3.1.1 through 4.4.1.4, consider restricting access to the affected API endpoints "adLog.cgi", "post.cgi", and "ad.cgi" to minimize the risk of exploitation until a patch is available. Avoid using crafted query strings in HTTPS requests to these endpoints.

Exploit

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-20

CWE-119

Related Identifiers

CVE-2007-5036

Affected Products

Airdefense Airsensor M520

References · 7

• 🔥 https://exploit-db.com/exploits/4426 · Exploit
• 🔥 http://sybsecurity.com/advisors/SYBSEC-ADV01-Airsensor_M520_HTTPD_Remote_Preauth_Denial_Of_Service_and_Buffer_Overflow_PoC · Exploit
• 🔥 http://secunia.com/advisories/26869 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-5036 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36691 · Note
• http://vupen.com/english/advisories/2007/3226 · Note
• http://securityfocus.com/bid/25715 · Note