A remote overflow exists in WhatsUp Gold. The _maincfgret.cgi script fails to properly bounds check the instancename variable resulting in a buffer overflow. With a specially crafted request, an attacker can potentially execute arbitrary code resulting in a loss of integrity.
Classification
Location:
Remote / Network Access
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Upgrade
Exploit:
Exploit Public,
Exploit Commercial
Solution
Upgrade to version 8.03 Hotfix 1 or higher, as it has been reported to fix this vulnerability. It is also possible to correct the flaw by implementing the following workaround(s): disable the web interface
