bugs.debian.org
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576308 CVE-2010-1147
OpenDcHub 0.8.1 - Remote Code Execution
Record summary
CVE-2010-1147 has a selected CVSS score of 6.0; EIP currently links 1 catalogued exploit.
Description
Stack-based buffer overflow in Open Direct Connect Hub (aka Open DC Hub or OpenDCHub) 0.8.1 allows remote authenticated users to execute arbitrary code via a long MyINFO message.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBOpenDcHub 0.8.1 - Remote Code ExecutionExploitDB exploitby Pierre NoguesNot analyzed1 file
References
Showing 12 of 14FEDORA-2010-6478Vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040360.html FEDORA-2010-6415Vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040380.html FEDORA-2010-6426Vendor advisory
http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040421.html [oss-security] 20100406 Re: CVE Request -- OpenDCHub v0.8.1 -- Stack overflow by handling a specially-crafted MyINFO messagemailing list
http://marc.info/?l=oss-security&m=127051570728944&w=2 [oss-security] 20100403 CVE Request -- OpenDCHub v0.8.1 -- Stack overflow by handling a specially-crafted MyINFO messagemailing list
http://openwall.com/lists/oss-security/2010/04/03/1 39664Third-party advisory
http://secunia.com/advisories/39664 indahax.com
http://www.indahax.com/exploits/opendchub-0-8-1-remote-code-execution-exploit 20100331 OpenDcHub 0.8.1 Remote Code Execution Exploitmailing list
http://www.securityfocus.com/archive/1/510428 39129vdb entry
http://www.securityfocus.com/bid/39129 ADV-2010-1023vdb entry
http://www.vupen.com/english/advisories/2010/1023 ADV-2010-1044vdb entry
http://www.vupen.com/english/advisories/2010/1044