Description
NetworkActiv Web Server 4.0 contains a buffer overflow vulnerability in the username field of the Security options that allows local attackers to crash the application by supplying an excessively long string. Attackers can trigger a denial of service by entering a crafted username value exceeding the expected buffer size through the Set username interface.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Networkactiv | NetworkActiv Web Server | 4.0 Pre-Alpha-3.7.2 | — |
References
- ExploitDB-45302 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: NetworkActiv Web Server 4.0 Username Field Buffer Overflow DoS third-party-advisory