Buffer Overflow in OpenLink 3.2

OpenLink 3.2 is a web configurator software used by some organizations to manage their online presence. The vulnerability allows remote attackers to gain privileges via a long GET request to the web configurator, potentially leading to unauthorized access and control over the system.

You're affected if you use OpenLink 3.2. Version info not stated in advisory. Check with your IT department or organization's documentation for specific version information.

1. Contact OpenLink directly for a patched version - no public patch link available.
   Immediate mitigations:
2. Restrict network access to your OpenLink instance (firewall it from the public internet)
3. Audit system logs for suspicious activity patterns

• www.securityfocus.com
• www.securityfocus.com