Progress LoadMaster Improper Input Validation Vulnerability Leading to Buffer Overflow

A buffer overflow vulnerability has been identified in Progress LoadMaster, stemming from improper input validation. This issue affects LoadMaster versions 7.2.40.0 and above, as well as all versions of ECS and LoadMaster Multi-Tenancy versions 7.1.35.4 and above. The vulnerability allows remote attackers to send carefully crafted HTTP requests that can cause a stack-based buffer overflow, potentially leading to the execution of arbitrary system commands.

Impact

Exploitation of this vulnerability allows for a stack-based buffer overflow, which could be used to execute arbitrary system commands.

Remediation

This vulnerability has been addressed by improving buffer management to prevent the execution of malicious code from the stack. Users should upgrade to the latest version of LoadMaster.