CVE-2007-5067

Published: Sep 24, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since header to (1) xigui32.exe or (2) xitami.exe.

Affected (1)

Products: Imatix: Xitami

Imatix

1 product

Xitami

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Imatix Xitami	Version 2.5_c2

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (10)

http://secunia.com/advisories/26884

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/25772

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2007/3258

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/36756

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4450

Source: cve@mitre.org

http://secunia.com/advisories/26884