BakBone NetVault Reporter scheduler service buffer overflow
Published:		26.07.2007
Source:		BUGTRAQ
SecurityVulns ID:		7981
Type:		remote
Level:		6/10
Description:		Heap buffer overflows in client (TCP/7978) and server (TCP/7977) schedule services.

Affected:		BACKBONE : NetVault Reporter 3.5
CVE:		CVE-2007-3911 (Multiple heap-based buffer overflows in (1) clsscheduler.exe (aka scheduler client) and (2) srvscheduler.exe (aka scheduler server) in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests.)

Original document

ZDI, ZDI-07-044: BakBone NetVault Reporter Scheduler Heap Overflow Vulnerability (26.07.2007)

Discuss:

Read or add your comments to this news (0 comments)