NaviCOPA.URI.Buffer.Overflow

Last Updated DateSep 24, 2009
Release DateApr 21, 2009
SeverityHigh
ImpactSystem Compromise: Remote attackers can gain control of vulnerable systems.
DescriptionThis indicates an attack attempt against a buffer-overflow vulnerability in InterVations NaviCOPA Web Server.

The vulnerability is caused by an error when the vulnerable software handles a overly long request. It allows a remote attacker to execute arbitrary code via sending a crafted request.
Affected ProductsNaviCOPA 2.x
Recommended ActionsUpdate to latest version 2.01 released 2006-10-06.
Common Vulnerabilities and Exposures (CVE)http://cve.mitre.org/cgi-bin/cvename.cgi?name=2006-5112
Reference/shttp://www.securityfocus.com/bid/20250 (BugTraq)
Reference: VID-16990