P10 Central Management Software Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in P10 Central Management Software version 1.4.13. The issue resides in the login password field, where local attackers can cause the application to crash by inputting an excessively long string. By pasting a 2000-byte payload into the password field and clicking 'login', the application experiences a crash, resulting in a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to a crash of the application, causing a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by pasting a 2000-byte payload into the password field of the login interface. After entering the oversized input, clicking the 'login' button will trigger the application to crash.