Path Exposure & Buffer Overrun in Ceilidh

 
Path Exposure & Buffer Overrun in Ceilidh
Reported June 6 by Delphis Consulting

DESCRIPTION

By using a specially crafted POST statement it is possible to spawn multiple copies of ceilidh.exe program where each process takes approximately 1% of available CPU cycles as well as approximately 700k of memory. Because of the memory resources are not freed properly it is possible to deny service to a Web system hosting the software. In addition, ceilidh.exe uses hidden form fields to store the true physical path location of its files.

VENDOR RESPONSE

The vendor is aware of this problem however no response was known at the time of this writing.

CREDITS
Discovered and reported by Delphis Consulting