CVEs-PoC/2006/CVE-2006-3790.md

CVE-2006-3790

Description

The decode_stringmap function in server_transport.cpp for UFO2000 svn 1057 allows remote attackers to cause a denial of service (daemon termination) via a keysize or valsize that is inconsistent with the packet size, which leads to a buffer over-read.

POC

Reference

• http://aluigi.altervista.org/adv/ufo2ko-adv.txt
• http://aluigi.altervista.org/adv/ufo2ko-adv.txt
• http://securityreason.com/securityalert/1259
• http://securityreason.com/securityalert/1259

Github

No PoCs found on GitHub currently.