Description
Multiple stack-based buffer overflows in MinaliC 2.0.0 allow remote attackers to execute arbitrary code via a (1) session_id cookie in a request to the get_cookie_value function in response.c, (2) directory name in a request to the add_default_file function in response.c, or (3) file name in a request to the retrieve_physical_file_name_or_brows function in response.c.
References
- 45462 third-party-advisory
- minalic-getcookievalue-bo(74651) vdb-entry
- http://secunia.com/secunia_research/2012-5
- minalic-response-bo(74653) vdb-entry
- minalic-adddefaultfile-bo(74652) vdb-entry
- 52873 vdb-entry