Description
Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute arbitrary code via a (1) long password in an Authorization header to the HTTP service or a (2) large packet to the SMPP service.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
Now SMS/MMS Gateway Buffer Overflow
exploit/windows/http/nowsms
Exploit-DB 2
- Now SMS/Mms Gateway - Remote Buffer Overflow (Metasploit) EDB-16779 · remote · May 9, 2010 · verified
- Now SMS/Mms Gateway 5.5 - Remote Buffer Overflow EDB-5695 · remote · May 29, 2008 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- ADV-2008-0615 vdb-entry
- 27896 vdb-entry
- http://aluigi.altervista.org/adv/nowsmsz-adv.txt
- 29003 third-party-advisory
- 20080219 Multiple buffer-overflow in NowSMS v2007.06.27 mailing-list
- 5695 exploit