|
A remote overflow exists in Pavuk. The program fails to properly check nonce and realm fields which accompany a digest authentication challenge upon the receipt of a 401 (unauthorized) http error resulting in an overflow in sprintf() in the digest authentication handler. With a specially crafted response, an attacker can cause execution of arbitrary code resulting in a loss of confidentiality, integrity, and/or availability.
|
kc.rr.com -
