CVE-2009-1394 – Timbuktu 8.6.6 - PlughNTCommand Named Pipe Buffer Overflow

https://notcve.org/view.php?id=CVE-2009-1394

Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long malformed string over the PlughNTCommand named pipe. Desbordamiento de búfer basado en pila en Motorola Timbuktu Pro 8.6.5 en Windows permite a atacantes remotos ejecutar código de su elección enviando un cadena malformada de gran tamaño sobre la tubería (pipe) PlughNTCommand. • https://www.exploit-db.com/exploits/16370 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=809 http://secunia.com/advisories/35533 http://www.netopia.com/software/products/tb2 http://www.securityfocus.com/archive/1/504554/100/0/threaded http://www.securityfocus.com/bid/35496 http://www.securitytracker.com/id?1022455 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •