Blake has discovered a vulnerability in BigAnt Messenger, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the AntServer Module (AntServer.exe) when processing HTTP requests. This can be exploited to cause a stack-based buffer overflow via an overly large HTTP GET request sent to an affected server.

Successful exploitation may allow execution of arbitrary code.

This is related to vulnerability #1 in:
SA29831

The vulnerability is confirmed in version 2.50. Other versions may also be affected.

Solution
Apply vendor patch:
Further details available to Secunia VIM customers

Provided and/or discovered by
Blake

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/9673

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers