|
Tomahawk Technologies SteelArrow Cookie HTTP Header Buffer Overflow Vulnerability
Reportedly, SteelArrow suffers from a buffer overflow condition when cookies are used. SteelArrow keeps records of user sessions using cookies. It is possible for an attacker to supply an overly long value of the Cookie HTTP header that will cause the buffer overflow condition. This will cause the SteelArrow service to crash and overwrite stack memory with attacker supplied values. |
|
|
Privacy Statement |