Vulnerability Details CVE-2010-1316
Multiple stack-based buffer overflows in Tembria Server Monitor before 5.6.1 allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted (1) GET, (2) PUT, or (3) HEAD request, as demonstrated by a malformed GET request containing a long PATH_INFO to index.asp.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.063
EPSS Ranking 90.5%
CVSS Severity
CVSS v2 Score 5.0
References
- http://secunia.com/advisories/39270
- http://www.corelan.be:8800/advisories.php?id=CORELAN-10-022
- http://www.corelan.be:8800/wp-content/forum-file-uploads/admin1/exploits/corelan_lincoln_tembria.py_.txt
- http://secunia.com/advisories/39270
- http://www.corelan.be:8800/advisories.php?id=CORELAN-10-022
- http://www.corelan.be:8800/wp-content/forum-file-uploads/admin1/exploits/corelan_lincoln_tembria.py_.txt
Products affected by CVE-2010-1316
-
cpe:2.3:a:tembria:server_monitor:*