Description
Heap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote attackers to execute arbitrary code via an RSTP command containing multiple Require headers.
References
- 25440 vdb-entry
- 20070824 [MU-200708-01] Helix DNA Server Heap Corruption mailing-list
- ADV-2007-2986 vdb-entry
- http://labs.musecurity.com/wp-content/uploads/2007/08/mu-200708-01.txt
- 26609 third-party-advisory
- 1018605 vdb-entry
- 3069 third-party-advisory