Path Exposure & Buffer Overrun in Ceilidh Reported June 6 by Delphis Consulting
By using a specially crafted POST statement it is possible to spawn multiple copies of
ceilidh.exe program where each process takes approximately 1% of available CPU cycles as
well as approximately 700k of memory. Because of the memory resources are not freed
properly it is possible to deny service to a Web system hosting the software. In addition,
ceilidh.exe uses hidden form fields to store the true physical path location of its files.
The vendor is aware of this problem however no response was
known at the time of this writing.
CREDITS Discovered and reported by Delphis Consulting