• info
• discussion
• exploit
• solution
• references

Zeus Web Server 'SSL2_CLIENT_HELLO' Remote Buffer Overflow Vulnerability

Zeus Web Server is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

Versions prior to Zeus Web Server 4.3r5 are vulnerable.