CVE-2004-1793

Vulnerability

A stack-based buffer overflow vulnerability exists in the swnet.dll module of YaSoft Switch Off versions 2.3 and earlier. This flaw is triggered by insufficient bounds checking when handling the message parameter within a SendMsg action to action.htm. [1]

Exploitation

An attacker must first authenticate to the vulnerable server. If a password is set, the attacker needs to log in before sending a malicious request. The exploit involves sending an excessively long message parameter to the action.htm endpoint, which causes the buffer overflow. [1]

Impact

Successful exploitation allows a remote attacker to execute arbitrary code on the affected system. The scope and privilege level of the compromise depend on the context in which the YaSoft Switch Off service is running. [1]

Mitigation

YaSoft Switch Off versions 2.3 and earlier are affected. No specific patched version or release date is disclosed in the available references. It is recommended to upgrade to a non-vulnerable version if available, or to implement network-level access controls to prevent unauthenticated access to the affected service. [1]