HTTP: Ipswitch What's Up Gold InstanceName Overflow

This signature detects attempts to exploit a known vulnerability in the Web interface of Ipswitch's What's Up Gold, a network monitoring application. Using the application's Web interface, attackers can send a URL request with an overly long InstanceName variable to crash the Web server or run arbitrary code with the privileges of the Web server process.

Extended Description

Ipswitch WhatsUp Gold is affected by a remote buffer-overflow vulnerability because the application fails to properly validate user-supplied string lengths before copying them into static process buffers. An attacker might leverage this issue to execute arbitrary code on the affected computer with the privileges of the user that started the vulnerable application.

Affected Products

Ipswitch whatsup_gold

References

BugTraq: 11043 11109

CVE: CVE-2004-0798

URL: http://www.idefense.com/application/poi/display?id=133&type=vulnerabilities&flashstatus=false

Short Name

HTTP:WHATSUP:INSTANCENAME-OF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Ipswitch What's Up Gold InstanceName Overflow

Extended Description

Affected Products

References

Found a potential security threat?