CVE-2018-25313
MEDIUMSysGauge 4.5.18 Local Denial of Service via Proxy Configuration
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25313. PoCs published by Hashim Jawad.
AI-analyzed exploit summary This exploit generates a payload file containing a large buffer of 'A' characters (3500 bytes) to trigger a local denial of service (DoS) in SysGauge v4.5.18 by overflowing the 'Proxy Server Host Name' field. The attack leverages a buffer overflow vulnerability in the application's proxy configuration handling.
Description
SysGauge 4.5.18 contains a buffer overflow vulnerability in the proxy configuration handler that allows local attackers to cause a denial of service by supplying an oversized string. Attackers can inject a large payload through the Proxy Server Host Name field in the Options menu to crash the application.
Exploits (1)
This exploit generates a payload file containing a large buffer of 'A' characters (3500 bytes) to trigger a local denial of service (DoS) in SysGauge v4.5.18 by overflowing the 'Proxy Server Host Name' field. The attack leverages a buffer overflow vulnerability in the application's proxy configuration handling.
References (2)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H