CVE-2013-1606 – Ubiquiti airCam RTSP Service 1.1.5 - Buffer Overflow (PoC)

https://notcve.org/view.php?id=CVE-2013-1606

Buffer overflow in the ubnt-streamer RTSP service on the Ubiquiti UBNT AirCam with airVision firmware before 1.1.6 allows remote attackers to execute arbitrary code via a long rtsp: URI in a DESCRIBE request. Desbordamiento de búfer en el servicio ubnt-streamer RTSP en Ubiquiti UBNT AirCam con airVision firmware anterior a v1.1.6 permite a atacantes remotos ejecutar código arbitrario a través de un rtsp de gran longitud: URI en una solicitud DESCRIBE. • https://www.exploit-db.com/exploits/26138 http://www.coresecurity.com/advisories/buffer-overflow-ubiquiti-aircam-rtsp-service http://www.exploit-db.com/exploits/26138 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •