Vulnerability · Published Sep 22, 2024 · Assigned by VulDB
CVE-2024-9088SourceCodester Telecom Billing Management System login buffer overflow
Medium 6.3
In plain English
A medium-severity buffer overflow in Telecom Billing Management System from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 57% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.8%top 43.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability has been found in SourceCodester Telecom Billing Management System 1.0 and classified as critical. This vulnerability affects the function login. The manipulation of the argument uname leads to buffer overflow. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Telecom Billing Management System | 1.0 |
Weakness: CWE-120 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
References
- VDB-278266 | SourceCodester Telecom Billing Management System login buffer overflow vdb-entry, technical-description
- VDB-278266 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #411854 | SourceCodester Telecom Billing Management System in C++ with Source Code 1.0 Buffer Overflow third-party-advisory
- https://github.com/CveSecLook/cve/issues/61 exploit, issue-tracking
- https://www.sourcecodester.com/ product