CVE-2018-25295
MEDIUMObserverIP Scan Tool 1.4.0.1 Denial of Service via IP Field
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25295. PoCs published by Gionathan Reale.
AI-analyzed exploit summary This Python script generates a 2000-byte buffer overflow payload to trigger a Denial of Service (DoS) in ObserverIP Scan Tool 1.4.0.1 by overwriting memory when pasted into the 'IP' field. The exploit creates a file 'exploit.txt' containing the malicious input, which crashes the application upon submission.
Description
ObserverIP Scan Tool 1.4.0.1 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the IP input field. Attackers can paste a 2000-byte buffer of repeated characters into the IP field and trigger a search operation to cause an application crash.
Exploits (1)
This Python script generates a 2000-byte buffer overflow payload to trigger a Denial of Service (DoS) in ObserverIP Scan Tool 1.4.0.1 by overwriting memory when pasted into the 'IP' field. The exploit creates a file 'exploit.txt' containing the malicious input, which crashes the application upon submission.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H