CVE-2008-1914 : Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM

Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to execute arbitrary code via a long URI in a request to TCP port 6080. NOTE: some of these details are obtained from third party information.

Published 2008-04-22 04:41:00

Updated 2018-10-11 20:37:53

Source MITRE

View at NVD, CVE.org

Vulnerability category: OverflowExecute code

Products affected by CVE-2008-1914

Bigantsoft » Bigant Messenger » Version: 2.2
cpe:2.3:a:bigantsoft:bigant_messenger:2.2:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2008-1914

EPSS FAQ

72.97%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2008-1914

BigAnt Server 2.50 SP1 Buffer Overflow

Disclosure Date: 2008-04-15

First seen: 2020-04-26

exploit/windows/misc/bigant_server_250

This exploits a stack buffer overflow in the BigAnt Messaging Service, part of the BigAnt Server product suite. This module was tested successfully against version 2.50 SP1. Authors: - Dr_IDE <Dr_IDE@hushmail.com>

More information
BigAnt Server 2.2 Buffer Overflow

Disclosure Date: 2008-04-15

First seen: 2020-04-26

exploit/windows/misc/bigant_server

This module exploits a stack buffer overflow in BigAnt Server 2.2. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. Authors: - MC <mc@metasploit.com>

More information

CVSS scores for CVE-2008-1914

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2008-1914

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2008-1914

http://www.vupen.com/english/advisories/2008/1238/references
https://www.exploit-db.com/exploits/5451
http://www.securityfocus.com/bid/28795

BigAnt IM Server HTTP GET Request Remote Buffer Overflow Vulnerability
https://exchange.xforce.ibmcloud.com/vulnerabilities/41830
http://www.securityfocus.com/archive/1/490916/100/0/threaded
http://www.securityfocus.com/archive/1/491035/100/0/threaded

Jump to

Vulnerability Details : CVE-2008-1914