Signature Detail
Short Name |
HTTP:OVERFLOW:XITAMIIFMOD |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Xitami Web Server If-Modified-Since Buffer Overflow |
Release Date |
2010/02/03 |
Update Number |
1602 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Xitami Web Server If-Modified-Since Buffer Overflow
This signature detects attempts to exploit a known vulnerability in Xitami Web Server. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.
Extended Description
Xitami is prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. Attackers may exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Xitami 2.5 is vulnerable to this issue; other versions may also be affected.
Affected Products
- Imatix Xitami 2.5.0
References
- BugTraq: 25772
- CVE: CVE-2007-5067