CVE-2008-2654

Description

Off-by-one error in the read_client function in webhttpd.c in Motion 3.2.10 and earlier might allow remote attackers to execute arbitrary code via a long request to a Motion HTTP Control interface, which triggers a stack-based buffer overflow with some combinations of processor architecture and compiler.

Primary references

• cve@mitre.org — Exploit
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org — Exploit
• cve@mitre.org
• cve@mitre.org — Vendor Advisory
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org — Exploit
• cve@mitre.org — Exploit
• cve@mitre.org — Patch
• cve@mitre.org