Vulnerability Details CVE-2011-5033
Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 36.8%
CVSS Severity
CVSS v2 Score 4.4
References
- http://forum.configserver.com/viewtopic.php?f=4&t=5008
- http://www.configserver.com/free/csf/changelog.txt
- http://www.exploit-db.com/exploits/18225
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71758
- http://forum.configserver.com/viewtopic.php?f=4&t=5008
- http://www.configserver.com/free/csf/changelog.txt
- http://www.exploit-db.com/exploits/18225
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71758
Products affected by CVE-2011-5033
-
cpe:2.3:a:configserver:configserver_security_firewall:*
-
cpe:2.3:a:configserver:configserver_security_firewall:5.00
-
cpe:2.3:a:configserver:configserver_security_firewall:5.01
-
cpe:2.3:a:configserver:configserver_security_firewall:5.02
-
cpe:2.3:a:configserver:configserver_security_firewall:5.03
-
cpe:2.3:a:configserver:configserver_security_firewall:5.04
-
cpe:2.3:a:configserver:configserver_security_firewall:5.05
-
cpe:2.3:a:configserver:configserver_security_firewall:5.06
-
cpe:2.3:a:configserver:configserver_security_firewall:5.07
-
cpe:2.3:a:configserver:configserver_security_firewall:5.08
-
cpe:2.3:a:configserver:configserver_security_firewall:5.09
-
cpe:2.3:a:configserver:configserver_security_firewall:5.10
-
cpe:2.3:a:configserver:configserver_security_firewall:5.11
-
cpe:2.3:a:configserver:configserver_security_firewall:5.12
-
cpe:2.3:a:configserver:configserver_security_firewall:5.13
-
cpe:2.3:a:configserver:configserver_security_firewall:5.14
-
cpe:2.3:a:configserver:configserver_security_firewall:5.15
-
cpe:2.3:a:configserver:configserver_security_firewall:5.16
-
cpe:2.3:a:configserver:configserver_security_firewall:5.17
-
cpe:2.3:a:configserver:configserver_security_firewall:5.18
-
cpe:2.3:a:configserver:configserver_security_firewall:5.19
-
cpe:2.3:a:configserver:configserver_security_firewall:5.20
-
cpe:2.3:a:configserver:configserver_security_firewall:5.21
-
cpe:2.3:a:configserver:configserver_security_firewall:5.22
-
cpe:2.3:a:configserver:configserver_security_firewall:5.30
-
cpe:2.3:a:configserver:configserver_security_firewall:5.31
-
cpe:2.3:a:configserver:configserver_security_firewall:5.32
-
cpe:2.3:a:configserver:configserver_security_firewall:5.33
-
cpe:2.3:a:configserver:configserver_security_firewall:5.34
-
cpe:2.3:a:configserver:configserver_security_firewall:5.35
-
cpe:2.3:a:configserver:configserver_security_firewall:5.36
-
cpe:2.3:a:configserver:configserver_security_firewall:5.37
-
cpe:2.3:a:configserver:configserver_security_firewall:5.38
-
cpe:2.3:a:configserver:configserver_security_firewall:5.39
-
cpe:2.3:a:configserver:configserver_security_firewall:5.40
-
cpe:2.3:a:configserver:configserver_security_firewall:5.41
-
cpe:2.3:h:directadmin:directadmin_server:*