Buffer overflow in Belkin International, Inc. Bulldog Plus Ups Monitoring Software
CVE-2009-20009
Belkin Bulldog Plus version 4.0.2 build 1219 contains a stack-based buffer overflow vulnerability in its web service authentication handler. When a specially crafted HTTP request is sent with an oversized Authorization header, the application fails to properly validate the input length before copying it into a fixed-size buffer, resulting in memory corruption and potential remote code execution. Exploitation requires network access and does not require prior authentication.
Vulnerability class: Buffer Overflow
EPSS: 0.015 (72.2th percentile) — read the EPSS interpretation.
Affected products
Weakness classification (CWE)
Public proof-of-concept exploits
References
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (exploit)
- disclosure@vulncheck.com (third-party-advisory)
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (third-party-advisory)
Frequently asked questions
- What is CVE-2009-20009?
- CVE-2009-20009 is a vulnerability in Belkin International, Inc. Bulldog Plus Ups Monitoring Software, classified under Stack-based Buffer Overflow. Published 2025-08-30.
- Is CVE-2009-20009 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.