Vulnerabilities > CVE-2004-1127 - Remote Buffer Overflow vulnerability in Open DC HUB Direct Connect Peer-To-Peer Client 0.7.14

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
open-dc-hub
critical
nessus
exploit available

Summary

Buffer overflow in Open Dc Hub 0.7.14 allows remote attackers, with administrator privileges, to execute arbitrary code via a long RedirectAll command.

Vulnerable Configurations

Part Description Count
Application
Open_Dc_Hub
1

Exploit-Db

descriptionOpen DC Hub 0.7.14 Remote Buffer Overflow Vulnerability. CVE-2004-1127. Remote exploits for multiple platform
idEDB-ID:24774
last seen2016-02-02
modified2004-11-24
published2004-11-24
reporterDonato Ferrante
sourcehttps://www.exploit-db.com/download/24774/
titleOpen DC Hub 0.7.14 - Remote Buffer Overflow Vulnerability

Nessus

  • NASL familyGentoo Local Security Checks
    NASL idGENTOO_GLSA-200411-37.NASL
    descriptionThe remote host is affected by the vulnerability described in GLSA-200411-37 (Open DC Hub: Remote code execution) Donato Ferrante discovered a buffer overflow vulnerability in the RedirectAll command of the Open DC Hub. Impact : Upon exploitation, a remote user with administrative privileges can execute arbitrary code on the system running the Open DC Hub. Workaround : Only give administrative rights to trusted users.
    last seen2020-06-01
    modified2020-06-02
    plugin id15843
    published2004-11-29
    reporterThis script is Copyright (C) 2004-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/15843
    titleGLSA-200411-37 : Open DC Hub: Remote code execution
  • NASL familyPeer-To-Peer File Sharing
    NASL idOPENDCHUB.NASL
    descriptionThe remote host is running Open DC Hub, a peer-to-peer file sharing application, which is vulnerable to a remote buffer overflow. A successful exploit would allow a remote attacker to execute code on the remote host. It must be noted that the remote attacker needs administrative access to this application.
    last seen2020-06-01
    modified2020-06-02
    plugin id15834
    published2004-11-25
    reporterThis script is Copyright (C) 2004-2018 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/15834
    titleOpen DC Hub RedirectAll Value Remote Overflow