Signature Detail

APP: DiskPulse Server 'GetServerInfo' Buffer Overflow Remote Code Execution Vulnerability

This signature detects attempts to exploit a known remote code-execution vulnerability in DiskPulse Server. It is because it fails to properly bounds-check user-supplied data. Specifically, a buffer-overflow condition occurs when an overly long string is provided in the "GetServerInfo" request. An attacker can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts can cause denial-of-service conditions.

Extended Description

DiskPulse Server is prone to a remote code-execution vulnerability because it fails to properly bounds-check user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition. DiskPulse Server 2.2.34 is vulnerable; other versions may also be affected.

Affected Products

• Flexense DiskPulse Server 2.2.34

References

• BugTraq: 43919
• URL: http://www.diskpulse.com/diskpulse_server.html