EDItran Communications Platform (editcp) 4.1 - Remote Buffer Overflow

Author: Pedro Andujar
type: dos
platform: multiple
port: 0
date_added: 2010-07-05
date_updated: 2014-08-03
verified: 1
codes: 
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/41342/info

EDItran Communications Platform (editcp) is prone to a remote buffer-overflow vulnerability because it fails to properly validate user-supplied input before copying it into a fixed-length buffer.

Attackers can exploit this issue to execute arbitrary code in the context of the application. Failed attacks may cause a denial-of-service condition.

editcp 4.1 R7 is vulnerable; other versions may also be affected.

$ perl -e '{print "A"x100}' | nc www.example.com:7777