The host is running Mongoose Web Server and is prone to remote buffer overflow vulnerability.

Successful exploitation will allow remote attackers to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. Impact Level: System/Application

Apply the patch from below link, https://code.google.com/p/mongoose/source/detail?r=025b11b1767a311b0434a385f5115463f6293ce9

The flaw is due to an error in the 'put_dir()' function (mongoose.c) when processing HTTP PUT web requests. This can be exploited to cause an assertion error or a stack-based buffer overflow.

Mongoose Web Server version 3.0

• http://secunia.com/advisories/45464
• http://www.openwall.com/lists/oss-security/2011/08/03/5
• http://xforce.iss.net/xforce/xfdb/68991

---

Updated on 2015-03-25