CVE-2014-3788
HighSummary
A heap-based buffer overflow in the Web Server in Cogent DataHub before version 7.3.5 allows remote attackers to execute arbitrary code by sending a negative value in the Content-Length field in a request.
Risk Assessment
An attacker could exploit this vulnerability to execute arbitrary code remotely, potentially leading to system compromise and data leakage.
Recommendation
It is recommended to upgrade Cogent DataHub to version 7.3.5 or later to mitigate this vulnerability.
Other vulnerabilities in Cogent DataHub
See all- CVE-2016-2288High
Cogent DataHub before 7.3.10 allows local users to gain privileges by leveraging the user or guest role to modify a file.
- CVE-2014-2353High
Cross-site scripting (XSS) vulnerability in Cogent DataHub before version 7.3.5 allows remote attackers to inject arbitrary web scripts or HTML via unspecified vectors.
- CVE-2014-3789High
GetPermissions.asp in Cogent Real-Time Systems Cogent DataHub before version 7.3.5 allows remote attackers to execute arbitrary commands via unspecified vectors.
Original NVD description (English source)
Heap-based buffer overflow in the Web Server in Cogent Real-Time Systems Cogent DataHub before 7.3.5 allows remote attackers to execute arbitrary code via a negative value in the Content-Length field in a request.