PT-2010-3020 · Tembria · Tembria Server Monitor

Published 2010-04-14 · Updated 2010-04-16 · CVE-2010-1316

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Tembria Server Monitor versions prior to 5.6.1

Description The issue is caused by multiple stack-based buffer overflows, allowing remote attackers to potentially execute arbitrary code or cause a denial of service (daemon crash) via crafted HTTP requests, such as GET, PUT, or HEAD requests. For example, a malformed GET request with a long PATH INFO to index.asp can trigger this issue.

Recommendations For versions prior to 5.6.1, update to version 5.6.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected HTTP endpoints, such as /index.asp, to minimize the risk of exploitation. Avoid using long PATH INFO in requests to the affected server until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-1316

Affected Products

Tembria Server Monitor

References · 5

• 🔥 https://exploit-db.com/exploits/12131 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-1316 · Security Note
• http://secunia.com/advisories/39270 · Vendor Advisory
• http://corelan.be:8800/wp-content/forum-file-uploads/admin1/exploits/corelan_lincoln_tembria.py_.txt · Note
• http://corelan.be:8800/advisories.php?id=CORELAN-10-022 · Note