Threats tagged 'ghsa-4x8q-mprg-xpmc'

Tobit Laboratories AG TeamDavid's Webbox application has a vulnerability in its password change functionality. The function triggered by including "(editini)" in the file path writes the new password to an "Archive.ini" file but does not verify the file path properly. This allows an unauthenticated attacker to specify a different file with excessive size, causing a buffer overflow and crashing the server, resulting in denial of service. The issue affects TeamDavid through Rollout 524.