Vulnerabilities > CVE-2004-0331 - Unspecified vulnerability in Dell Openmanage

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
dell
metasploit
NVD
Published: 2004-11-23
Updated: 2024-11-20

Summary

Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (crash) via a HTTP POST with a long application variable.

Vulnerable Configurations

Part Description Count
Application
Dell
4

Metasploit

descriptionThis module exploits a heap overflow in the Dell OpenManage Web Server (omws32.exe), versions 3.2-3.7.1. The vulnerability exists due to a boundary error within the handling of POST requests, where the application input is set to an overly long file name. This module will crash the web server, however it is likely exploitable under certain conditions.
idMSF:AUXILIARY/DOS/HTTP/DELL_OPENMANAGE_POST
last seen2020-05-23
modified2017-11-08
published2009-06-23
references
reporterRapid7
sourcehttps://github.com/rapid7/metasploit-framework/blob/master//modules/auxiliary/dos/http/dell_openmanage_post.rb
titleDell OpenManage POST Request Heap Overflow (win32)

References