Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server (yasslEWS) 0.2, and (3) _shttpd_put_dir function in io_dir.c in Simple HTTPD (shttpd) 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT request, as exploited in the wild in 2011.
More details here:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-2900
Most Liked
Latest Member Comments
PoS Malware Kits Rose in Underground in 2014... on 03-17-2015
New PCI Compliance Study... on 03-17-2015
Latest Posts
- What Does Being Data-Centric Actually Look Like?
- The Big 3: Top Domain-Based Attack Tactics Threatening Organizations
- Security Compass Receives Funding for Product Development and Expansion
- Password Shaming Isn’t Productive – Passwords Are Scary Business
- Five Key Cyber-Attack Trends for This Year
- 20/20 Vision on 2020's Network Security Challenges
- Is Cybersecurity Getting Too Complex?
- Global Security Threats Organizations Must Prepare for in 2020
- Six Reasons for Organizations to Take Control of Their Orphaned Encryption Keys
- The Cybersecurity Skills Gap: An Update for 2020