PT-2008-5780 · Unknown · Campanel.Dll+1

Rgod · Published 2008-10-14 · Updated 2017-09-29 · CVE-2008-4548

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RTS Sentry version 2.1.0.2

Description The issue is related to a stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control, which is part of the CamPanel.dll component. This overflow can be triggered by passing a long second argument to the ConnectServer() method, potentially allowing remote attackers to execute arbitrary code.

Recommendations For RTS Sentry version 2.1.0.2, consider disabling the ConnectServer() method in the PTZCamPanelCtrl ActiveX control until a patch is available to prevent potential exploitation.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-4548

Affected Products

Campanel.Dll

Rts Sentry

References · 6

• 🔥 https://exploit-db.com/exploits/4918 · Exploit
• http://secunia.com/advisories/28435 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-4548 · Security Note
• http://securityfocus.com/bid/27304 · Note
• http://securityreason.com/securityalert/4411 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39725 · Note