HTTP: Xitami Web Server If-Modified-Since Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Xitami Web Server. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

Xitami is prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it into an insufficiently sized memory buffer. Attackers may exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. Xitami 2.5 is vulnerable to this issue; other versions may also be affected.

Affected Products

Imatix xitami

References

BugTraq: 25772

CVE: CVE-2007-5067

Short Name

HTTP:OVERFLOW:XITAMIIFMOD

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Xitami Web Server If-Modified-Since Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?