A stack-based buffer overflow in Redir 3.3 allows remote, unauthenticated attackers to crash the application, resulting in a denial of service.

The application is vulnerable to a stack-based buffer overflow within the doproxyconnect function due to the use of the sprintf function without proper length validation. An unauthenticated attacker can supply oversized input to the proxy connection string, overwriting memory and causing a segmentation fault that terminates the process.

Successful exploitation of this vulnerability leads to an immediate denial of service, rendering the affected Redir instance unavailable. Given that the CVSS score is 7.5, the impact is considered High, as the flaw is remotely exploitable without requiring user interaction or authentication. Frequent service interruptions can disrupt critical network traffic redirection, leading to potential operational downtime for dependent systems.

Immediate Action: Upgrade to the latest version of Redir where this buffer overflow is patched. If an update is not immediately available, restrict access to the service to trusted IP addresses only.

Proactive Monitoring: Monitor system logs for segmentation faults or unexpected service terminations associated with the Redir process. Implement alerts for abnormal traffic patterns directed at the proxy port.

Compensating Controls: Deploy a Web Application Firewall or similar network security appliance to inspect and drop packets containing excessively long connection strings before they reach the Redir service.

Public Exploit Available: Yes, a proof of concept is available via Exploit-DB (EDB-ID: 47919).

This vulnerability presents a clear risk of service disruption for systems relying on Troglobit Redir. Organizations should prioritize updating the software to a patched version to eliminate the buffer overflow condition. If patching is delayed, network-level access controls should be strictly enforced to limit exposure to this unauthenticated attack vector.