RabidHamster R4 Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A stack-based buffer overflow vulnerability has been identified in RabidHamster R4 version 1.25. This vulnerability arises from the unsafe use of sprintf() in the logging of malformed HTTP requests, creating an opportunity for remote attackers to execute arbitrary code within the context of the web server process.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, causing heap corruption and allowing for arbitrary code execution under the web server process's context.

Reproduction

The vulnerability can be reproduced by sending a crafted HTTP request that includes a long URI. This can be done using a tool like 'udpsz' to automate the process. The 'miniscreenshot' command can also be used to trigger the overflow, but this requires additional steps to craft the request properly.