WEB_CGI ezadmin.cgi access


Code: p983

Severity: Notice


Description: This event is generated when an attempt is made to access ezadmin.cgi on an internal web server. This may indicate an attempt to exploit a buffer overflow vulnerability in EasyBoard 2000 version 1.27.

Impact: Remote execution of arbitrary code, possibly leading to remote root compromise.

Corrective: It is not known if this vulnerability has been patched by the vendor. However, Jin Ho Yu has submitted a third-party fix to the Bugtraq list. See http://marc.theaimsgroup.com/?l=bugtraq&m=101345069220199&w=2 for ezboard-fix.pl.