← Vulnerability feed

Vulnerability record · CVE-2009-4661 · published 3 March 2010

CVE-2009-4661: Bigantsoft bigant server memory buffer overflow vulnerability

Bigantsoft · Bigant Server

Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial of service (application crash) via a crafted ZIP file that is not properly handled when the victim uses the (1) Update or (2) Plug-In console menu item.

4.3 CVSS 2.0 Medium EPSS 2.1% · top 19.0% CWE-119 · Memory buffer overflow
4.3CVSS 2.0 base score
2.1%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
16 Jun 2026Last modified by NVD

Description

Multiple buffer overflows in BigAnt Server 2.50 SP6 and earlier allow user-assisted remote attackers to cause a denial of service (application crash) via a crafted ZIP file that is not properly handled when the victim uses the (1) Update or (2) Plug-In console menu item.

AV:N/AC:M/Au:N/C:N/I:N/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.exploit-db.com/exploits/9695
http://www.exploit-db.com/exploits/9734
http://www.exploit-db.com/exploits/9695
http://www.exploit-db.com/exploits/9734

Track CVE-2009-4661 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2025-0364Bigantsoft bigant server authentication bypass via alternate path vulnerabilityBigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An una…EPSS 1.9%8.8CVE-2022-23346Bigantsoft bigant server unrestricted file upload vulnerabilityBigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues.EPSS 1.4%8.8CVE-2022-23349Bigantsoft bigant server cross-site request forgery vulnerabilityBigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF).EPSS 0.65%7.5CVE-2022-26281Bigantsoft bigant server missing encryption vulnerabilityBigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.EPSS 0.95%7.5CVE-2022-23352Bigantsoft bigant server vulnerabilityAn issue in BigAnt Software BigAnt Server v5.6.06 can lead to a Denial of Service (DoS).EPSS 1.6%7.5CVE-2022-23347Bigantsoft bigant server path traversal vulnerabilityBigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.EPSS 13%7.5CVE-2022-23345Bigantsoft bigant server missing authentication for critical function vulnerabilityBigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control.EPSS 1.6%5.4CVE-2022-23350Bigantsoft bigant server cross-site scripting vulnerabilityBigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting (XSS) vulnerability.EPSS 0.61%

Source: NIST National Vulnerability Database (record CVE-2009-4661), CISA KEV, FIRST EPSS (scores of 2026-10-02). This page is refreshed as NVD updates the record.