• info
• discussion
• exploit
• solution
• references

XAMPP Mssql_Connect Remote Buffer Overflow Vulnerability

XAMPP is prone to a remote buffer-overflow vulnerability because the software fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

An attacker can exploit this issue to execute arbitrary machine code in the context of the affected webserver. Failed exploit attempts will likely crash the webserver, denying service to legitimate users.

XAMPP versions prior to 1.6.0a are vulnerable to this issue.