Sysax Multi Server Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Sysax Multi Server version 6.95. The issue arises in the administrative password field, where attackers can overwrite the password with 800 bytes of repeated characters. This exploitation leads to an application crash, disrupting server functionality.

Impact

Exploitation of this vulnerability causes the application to crash, interrupting server operations.

Reproduction

To reproduce this vulnerability, upload a Python script that generates a buffer of 800 bytes of repeated characters. After running the script, copy the generated payload into the administrative password field of the Sysax Multi Server application. Save the changes to trigger the crash.