CVE-2019-25705 - Vulnerability Analysis

Overview

Echo Mirage 3.1 contains a buffer overflow caused by supplying an oversized string in the Rules action field, letting local attackers execute arbitrary code or crash the application, exploit requires local access to paste crafted payload.

Severity & Score

Impact

Local attackers can execute arbitrary code or crash the application, leading to potential full system compromise or denial of service.

Mitigation

Update to the latest version of Echo Mirage.

References

• https://sourceforge.net/projects/echomirage.oldbutgold.p/
• https://www.exploit-db.com/exploits/46216
• https://www.vulncheck.com/advisories/echo-mirage-stack-buffer-overflow-via-rules-action-field
• http://initd.sh/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner