Secunia

wirepair has reported a vulnerability in the Dell OpenManage Server Administrator, which potentially can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the integrated web server when handling certain HTTP POST requests. This can be exploited to cause a heap overflow by sending a specially crafted POST request containing a hidden application variable set to an overly long string.

According to the vendor OpenManage Server Administrator 1.2 and later is affected.

Solution
Restrict access to the web interface (default port 1311/TCP), allowing only trusted IP addresses to connect.
Further details available in Customer Area

Provided and/or discovered by
wirepair

Changelog
Further details available in Customer Area

Original Advisory
http://sh0dan.org/files/domadv.txt

Deep Links
Links available in Customer Area