Files ≈ Packet Storm Packet Storm - Information Security News, Files, Tools, Exploits, Advisories and Whitepapers http://packetstormsecurity.org/ en-us Sun, 27 May 2012 23:12:38 GMT Packet Storm 144400 http://packetstormsecurity.org/ http://www.google-analytics.com/__utm.gif?utmwv=1.3&utmn=1642922117&utmcs=ISO-8859-1&utmsr=31337x31337&utmsc=32-bit&utmul=en-us&utmje=0&utmfl=-&utmcn=1&utmdt=Files%u2248%20Packet%20Storm&utmhn=packetstormsecurity.org&utmr=-&utmp=%2F0408-advisories%2F08.25.04.txt%2F&utmac=UA-18885198-1&utmcc=__utma%3D32867617.1642922117.1338160358.1338160358.1338160358.1%3B%2B__utmz%3D32867617.1338160358.1.1.utmccn%3D(direct)%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none) iDEFENSE Security Advisory 2004-08-25.t http://packetstormsecurity.org/files/34168/08.25.04.txt http://packetstormsecurity.org/files/34168/08.25.04.txt http://packetstormsecurity.org/files/34168/iDEFENSE-Security-Advisory-2004-08-25.t.html Thu, 26 Aug 2004 21:51:30 GMT iDEFENSE Security Advisory 08.25.04 - Remote exploitation of a buffer overflow vulnerability in Ipswitch Inc.'s WhatsUp Gold allows attackers to execute arbitrary code under the privileges of the user that instantiated the application. The problem specifically exists in the _maincfgret.cgi script accessible through the web server installed by WhatsUp Gold. By posting a long string for the value of 'instancename', a buffer overflow occurs allowing an attacker to redirect the flow of control and eventually execute arbitrary code. Fixed in version 8.03 Hotfix 1.