Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute arbitrary code via a (1) long password in an Authorization header to the HTTP service or a (2) large packet to the SMPP service.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Now SMS/MMS Gateway HTTP/SMPP 请求 栈溢出漏洞
Vulnerability Description
Now SMS & MMS Gateway（NowSMS）是英国Now Wireless公司的一套短信（SMS）和彩信（MMS）内容交付解决方案。该方案能够作为SMS网关、MMS网关、WAP Push网关以及多媒体消息中心。 NowSMS监听在8800端口上的Web接口允许用户使用网关发送各种类型的消息，该接口上用于处理HTTP Authorization参数中base64口令的函数存在栈溢出漏洞。如果用户发送了超过256字节的报文的话，就可以触发这个溢出，导致执行任意指令。 NowSMS使用4K字节的栈
CVSS Information
N/A
Vulnerability Type
N/A