medium4.4Public exploit code
CVE-2011-5033
Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CSF Firewall - Buffer Overflow (PoC)2011-12-09 · dos · linux
Impact
Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Configserver | Configserver Security Firewall | through 5.42 Versions 5.00, 5.01, 5.02, 5.03, 5.04 |
Weakness classification
References
- NVD record
- CVE.org record
- http://forum.configserver.com/viewtopic.php?f=4&t=5008
- http://www.configserver.com/free/csf/changelog.txt
- http://www.exploit-db.com/exploits/18225
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71758
- http://forum.configserver.com/viewtopic.php?f=4&t=5008
- http://www.configserver.com/free/csf/changelog.txt
- http://www.exploit-db.com/exploits/18225
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71758