Motorola Netopia netOctopus SDCS Buffer Overflow Exploit

This module exploits a remote buffer overflow in the Motorola Netopia netOctopus SDCS server service.



The vulnerability exists within the code responsible for parsing client requests. When reading in a request from the network, a 32-bit integer is read in that specifies the number of bytes that follow. This value is not validated, and is then used to read data into a fixed-size stack buffer. This results in an exploitable stack buffer overflow.