CVEs-PoC/2008/CVE-2008-7232.md

CVE-2008-7232

Description

Buffer overflow in the report function in xtacacsd 4.1.2 and earlier allows remote attackers to execute arbitrary code via a crafted CONNECT TACACS command.

POC

Reference

• http://aluigi.altervista.org/adv/xtacacsdz-adv.txt
• http://aluigi.altervista.org/adv/xtacacsdz-adv.txt
• http://aluigi.org/poc/xtacacsdz.zip
• http://aluigi.org/poc/xtacacsdz.zip

Github

No PoCs found on GitHub currently.