• info
• discussion
• exploit
• solution
• references

Motion 'read_client()' Off-By-One Buffer Overflow Vulnerability

Solution:
The vendor released Motion 3.2.10.1 to address this issue. Please see the references for more information.


Kenneth Jahn Lavrsen Motion 3.2.10

• Kenneth Jahn Lavrsen motion-3.2.10.1.tar.gz
  http://downloads.sourceforge.net/motion/motion-3.2.10.1.tar.gz


• Kenneth Jahn Lavrsen webhttpd10-security.dif
  http://www.lavrsen.dk/twiki/pub/Motion/ReleaseNoteMotion3x2x10/webhttp d-security.diff

Kenneth Jahn Lavrsen Motion 3.2.9

• Kenneth Jahn Lavrsen motion-3.2.10.1.tar.gz
  http://downloads.sourceforge.net/motion/motion-3.2.10.1.tar.gz


• Kenneth Jahn Lavrsen webhttpd-security-video2-backport.diff
  http://www.lavrsen.dk/twiki/pub/Motion/ReleaseNoteMotion3x2x9/webhttpd -security-video2-backport.diff