Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.11082
Category:Gain a shell remotely
Title:Boozt index.cgi overflow
Summary:It seems that index.cgi from Boozt AdBanner; is installed and is vulnerable to a buffer overflow:;; It doesn't check the length of user supplied variables before copying them to internal arrays.
Description:Summary:
It seems that index.cgi from Boozt AdBanner
is installed and is vulnerable to a buffer overflow:

It doesn't check the length of user supplied variables before copying them to internal arrays.

Vulnerability Impact:
An attacker may exploit this vulnerability to make the web server
crash continually or even execute arbirtray code on the system.

Affected Software/OS:
Boozt 0.9.8alpha is known to be affected. Other versions or
products might be affected as well.

Solution:
Upgrade your software or protect it with a filtering reverse proxy.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2002-0098
BugTraq ID: 3787
http://online.securityfocus.com/cgi-bin/vulns-item.pl?section=info&id=3787
Bugtraq: 20020105 BOOZT! Standard 's administration cgi vulnerable to buffer overflow (Google Search)
http://marc.info/?l=bugtraq&m=101027773404836&w=2
Bugtraq: 20020109 BOOZT! Standard CGI Vulnerability : Exploit Released (Google Search)
http://online.securityfocus.com/archive/1/249219
http://www.iss.net/security_center/static/7790.php
CopyrightCopyright (C) 2002 Michel Arboi

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.