CVE-2013-10036

A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW_BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler (SEH), leading to arbitrary code execution when the application processes the file.

The following products are affected by CVE-2013-10036 vulnerability.

Here, you will find a curated list of external links that provide in-depth information to CVE-2013-10036.

URL	Resource
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/beetel_netconfig_ini_bof.rb
https://www.exploit-db.com/exploits/28969
https://www.fortiguard.com/encyclopedia/ips/37394/beetel-connection-manager-netconfig-username-buffer-overflow
https://www.vulncheck.com/advisories/beetel-connection-manager-stack-based-buffer-overflow