CVE-2009-4660

NONE EPSS 99.1%
Published Mar 3, 201016y ago · Modified Jun 16, 20262w ago
Find Similar
Published Mar 3, 2010 16y ago
Last Modified Jun 16, 2026 2w ago

Description

Stack-based buffer overflow in the AntServer Module (AntServer.exe) in BigAnt IM Server 2.50 allows remote attackers to execute arbitrary code via a long GET request to TCP port 6660.

Threat Intelligence

EPSS Exploit Probability
99.1% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 1

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer Memory Safety

Affected Products 1

VendorProductVersionRange
bigantsoftbigant_messenger2.50any

References 6

  • secunia.com http://secunia.com/advisories/36704
    Vendor Advisory
  • attrition.org http://www.attrition.org/pipermail/vim/2009-September/002271.html
  • exploit-db.com http://www.exploit-db.com/exploits/9673
  • exploit-db.com http://www.exploit-db.com/exploits/9690
  • securityfocus.com http://www.securityfocus.com/bid/36407
    Exploit
  • vupen.com http://www.vupen.com/english/advisories/2009/2679
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.