Secunia

Two vulnerabilities have been reported in mnoGoSearch, which can be exploited by malicious people to compromise a vulnerable system.

Both vulnerabilities are caused due to boundary errors, when handling user input supplied to the parameters "ul" and "tmplt". This can be exploited by supplying an overly long, specially crafted argument, which will cause a buffer overflow.

Successful exploitation allows execution of arbitrary code with the privileges of the web service.

Examples:
http://[victim]/cgi-bin/search.cgi?ul=AAAA...[6000]...AAAA
http://[victim]/cgi-bin/search.cgi?tmplt=AAAA...[1050]...AAAA

The "ul" vulnerability has been reported in version 3.1.20. The "tmplt" vulnerability has been reported in version 3.2.10.

Solution
An updated CVS version is available:
Further details available in Customer Area

Provided and/or discovered by
pokleyzz

Original Advisory
http://www.scan-associates.net/papers/mnogosearch.txt

Deep Links
Links available in Customer Area