|
|
| |
LiteServe is "a powerful, full-featured Web, Mail, FTP, and Telnet server. This server software is perfect for personal websites or commercial sites with high traffic demands and multiple domains".
A vulnerability in the LiteServe's GUI allows remote attackers to overflow an internal buffer if the web master is currently watching the product's logs. |
| |
Credit:
The information has been provided by Tri Huynh.
|
| |
Vulnerable systems:
* LiteServe version 2.2
If LiteServe receives a request with a long filename like this GET /aaaaaaaaaaaaaaaaaaaaaa...htm HTTP/1.0 a buffer overflow will occur if the web master is currently viewing the server log and click on the request using LiteServe interface.
|
|
|
|
|
