CVE-2010-1147

EPSS 8.2%

Stack-based buffer overflow in Open Direct Connect Hub (aka Open DC Hub or OpenDCHub) 0.8.1 allows remote authenticated users to execute arbitrary code via a long MyINFO message.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/11986unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=576308 http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040360.html http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040380.html http://lists.fedoraproject.org/pipermail/package-announce/2010-April/040421.html http://marc.info/?l=oss-security&m=127051570728944&w=2 http://openwall.com/lists/oss-security/2010/04/03/1 https://bugzilla.redhat.com/show_bug.cgi?id=579206 http://secunia.com/advisories/39664 http://www.indahax.com/exploits/opendchub-0-8-1-remote-code-execution-exploit#more-600 http://www.securityfocus.com/archive/1/510428 http://www.securityfocus.com/bid/39129 http://www.vupen.com/english/advisories/2010/1023