CVE-2008-5674

EPSS 4.5%

Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service (device crash) and read portions of memory via (1) an invalid camnum parameter to the pocketpc component and (2) an invalid id parameter to the show_gallery_pic component.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/31233unverified exploitdbwww.exploit-db.com/exploits/31234unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://aluigi.altervista.org/adv/webcamxp-adv.txt http://osvdb.org/42929 http://secunia.com/advisories/29007 http://securityreason.com/securityalert/4788 http://www.osvdb.org/42927 http://www.osvdb.org/42928 http://www.securityfocus.com/archive/1/488364/100/200/threaded http://www.securityfocus.com/bid/27875