CVE-2018-25233 | BDVDB-2026-323628 Detail
WebdriveWebDrive
Description#
WebDrive 18.00.5057 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the username field during Secure WebDAV connection setup. Attackers can input a buffer-overflow payload of 5000 bytes in the username parameter and trigger a connection test to cause the application to crash.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: local.
Weaknesses#
- CWE-233 Improper Handling of Parameters
References#
Exploit#
History#
- Version 1Record published in the CVE List.