CVE-2019-25545
MEDIUMTerminal Services Manager 3.2.1 Local Buffer Overflow Denial of Service
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25545. PoCs published by Alejandra Sánchez.
AI-analyzed exploit summary This exploit demonstrates a local buffer overflow vulnerability in Terminal Services Manager 3.2.1, causing a denial of service (DoS) when a maliciously crafted input is provided. The PoC generates a large buffer of 'A' characters and writes it to a file, which when used as input in the application triggers the crash.
Description
Terminal Services Manager 3.2.1 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying an excessively long string in the computer name field. Attackers can input a 5000-byte buffer of data into the 'Computer name or IP address' field during computer addition, causing a denial of service when the server entry is accessed.
Exploits (1)
This exploit demonstrates a local buffer overflow vulnerability in Terminal Services Manager 3.2.1, causing a denial of service (DoS) when a maliciously crafted input is provided. The PoC generates a large buffer of 'A' characters and writes it to a file, which when used as input in the application triggers the crash.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H