Websense Triton Content Manager handle_debug_network Stack Buffer Overflow (CVE-2015-5718)

A stack buffer overflow vulnerability exists in Websense Triton Content Manager. The vulnerability is due to calling "strcpy" without boundary checking. A remote unauthenticated attacker can overflow the "dest" buffer in "handledebugnetwork"...

SEC Consult SA-20150805-0 :: Websense Content Gateway Stack Buffer Overflow in handle_debug_network

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory 20150805-0 ======================================================================= title: Stack buffer overflow in handledebugnetwork product: Websense Triton Content Manager vulnerable version: 8.0.0...

CVE-2015-5718: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the handledebugnetwork function in the manager in Websense Content Gateway before 8.0.0 HF02 allows remote administrators to cause a denial of service crash via a crafted diagnostic command line request to submitnetdebug.cgi...