mt-daapd buffer overflow
Published:		14.06.2008
Source:		BUGTRAQ
SecurityVulns ID:		9085
Type:		remote
Level:		6/10
Description:		Buffer overflow on POST request processing.

Affected:		MTDAAPD : mt-daapd 0.2
CVE:		CVE-2008-1771 (Integer overflow in the ws_getpostvars function in Firefly Media Server (formerly mt-daapd) 0.2.4.1 (0.9~r1696-1.2 on Debian) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a large Content-Length.)

Original document

DEBIAN, [SECURITY] [DSA 1597-1] New mt-daapd packages fix several vulnerabilities (14.06.2008)

Discuss:

Read or add your comments to this news (0 comments)