CVE

Id
32771  
CVE No.
CVE-2008-2654  
Status
Candidate  
Description
Off-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and compiler.  
Phase
Assigned (20080610)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
354611 32771 CVE-2008-2654 MLIST:[oss-security] 20080610 Re: exploitability of off-by-one in motion webserver  View
354612 32771 CVE-2008-2654 URL:http://marc.info/?l=oss-security&m=121314089321816&w=2  View
354613 32771 CVE-2008-2654 MLIST:[oss-security] 20080610 exploitability of off-by-one in motion webserver  View
354614 32771 CVE-2008-2654 URL:http://marc.info/?l=oss-security&m=121311577731820&w=2  View
354615 32771 CVE-2008-2654 MLIST:[oss-security] 20080611 Re: exploitability of off-by-one in motion webserver  View
354616 32771 CVE-2008-2654 URL:http://marc.info/?l=oss-security&m=121314471626034&w=2  View
354617 32771 CVE-2008-2654 MLIST:[oss-security] 20080611 Re: exploitability of off-by-one in motion webserver  View
354618 32771 CVE-2008-2654 URL:http://marc.info/?l=oss-security&m=121314329424538&w=2  View
354619 32771 CVE-2008-2654 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=484572  View
354620 32771 CVE-2008-2654 CONFIRM:http://www.lavrsen.dk/twiki/pub/Motion/ReleaseNoteMotion3x2x10/webhttpd-security.diff  View
354621 32771 CVE-2008-2654 CONFIRM:http://www.lavrsen.dk/twiki/pub/Motion/ReleaseNoteMotion3x2x9/webhttpd-security-video2-backport.diff  View
354622 32771 CVE-2008-2654 GENTOO:GLSA-200807-02  View
354623 32771 CVE-2008-2654 URL:http://security.gentoo.org/glsa/glsa-200807-02.xml  View
354624 32771 CVE-2008-2654 BID:29636  View
354625 32771 CVE-2008-2654 URL:http://www.securityfocus.com/bid/29636  View
354626 32771 CVE-2008-2654 VUPEN:ADV-2008-1796  View
354627 32771 CVE-2008-2654 URL:http://www.vupen.com/english/advisories/2008/1796  View
354628 32771 CVE-2008-2654 SECUNIA:30544  View
354629 32771 CVE-2008-2654 URL:http://secunia.com/advisories/30544  View
354630 32771 CVE-2008-2654 SECUNIA:30864  View
354631 32771 CVE-2008-2654 URL:http://secunia.com/advisories/30864  View
354632 32771 CVE-2008-2654 XF:motion-readclient-bo(42979)  View

Related JVN