2240.txt

来自「This is the snapshot of Snot Latest Rule」· 文本 代码 · 共 55 行

Rule:  

--
Sid:
2240

--
Summary:
This event is generated when an attempt is made to exploit a known vulnerability in PDGSoft Shopping Cart.

--
Impact:
Serious. Execution of arbitrary code is possible.

--
Detailed Information:
Certain versions of PDGSoft Shopping Cart suffer from a buffer overflow condition that can present an attacker with the opportunity to execute arbitrary code of their choosing.

The vulnerable executable files are redirect.exe and changepw.exe, which can be accessed via the web interface.

--
Affected Systems:
PDGSoft Shopping Cart 1.50

--
Attack Scenarios:
The attacker needs to supply an overly long string to either of the affected executables.

--
Ease of Attack:
Simple. No exploit software required.

--
False Positives:
None known.

--
False Negatives:
None known.

--
Corrective Action:
Upgrade to the latest non-affected version of the software.

--
Contributors:
Sourcefire Vulnerability Research Team
Brian Caswell <[e-mail]>
Nigel Houghton <[e-mail]>

-- 
Additional References:

--