Secunia

Michael Thumann has reported a vulnerability in PrivateWire, which can be exploited by malicious people to cause a DoS and potentially compromise a vulnerable system.

The vulnerability is caused due to a boundary error within the Online Registration functionality when handling an overly long URL. This can be exploited to cause a buffer overflow via an overly long GET request.

The vulnerability has been reported in PrivateWire Gateway version 3.7. Prior versions may also be affected.

Solution
The vendor has reportedly issued a patch.
Further details available in Customer Area

Provided and/or discovered by
Michael Thumann

Changelog
Further details available in Customer Area

Original Advisory
http://www.ernw.de/security_advisories.html

Deep Links
Links available in Customer Area