Описание
Multiple heap-based buffer overflows in (1) clsscheduler.exe (aka scheduler client) and (2) srvscheduler.exe (aka scheduler server) in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 3.5update3 (включая)
cpe:2.3:a:bakbone:netvault_reporter:*:*:*:*:*:*:*:*
EPSS
Процентиль: 94%
0.06826
Низкий
10 Critical
CVSS2
Дефекты
CWE-119
Связанные уязвимости
github
больше 4 лет назад
Multiple heap-based buffer overflows in (1) clsscheduler.exe (aka scheduler client) and (2) srvscheduler.exe (aka scheduler server) in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests.
EPSS
Процентиль: 94%
0.06826
Низкий
10 Critical
CVSS2
Дефекты
CWE-119