HP OpenView Radia 2.0/3.1/4.0 Notify Daemon Multiple Remote Buffer Overflow Vulnerabilities

🗓️ 01 Jul 2014 00:00:00Reported by RootType

HP OpenView Radia 2.0/3.1/4.0 Notify Daemon Multiple Remote Buffer Overflow Vulnerabilitie


                                                source: http://www.securityfocus.com/bid/13835/info

HP OpenView Radia Notify Daemon (RADEXECD) is affected by multiple remote buffer overflow vulnerabilities.

An attacker can craft a malicious request that can overflow a buffer and result in process memory corruption. These issues may be exploited to gain unauthorized access in the context of the server. 

The following proof of concept is available:
&#60;callback port&#62;\0&#60;username&#62;\0&#60;password&#62;\0
&#34;LIST &#34; . (0x90 x &#60;offset&#62;) . &#60;ret_addr&#62; . &#34;.&#34; . &#60;shellcode&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1