Vulnerability Details CVE-2012-6530
Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create folder permission to execute arbitrary code via a crafted request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.638
EPSS Ranking 98.3%
CVSS Severity
CVSS v2 Score 7.1
References
- http://www.exploit-db.com/exploits/18382
- http://www.exploit-db.com/exploits/18420
- http://www.pwnag3.com/2012/01/sysax-multi-server-550-exploit.html
- http://www.securityfocus.com/bid/51548
- http://www.exploit-db.com/exploits/18382
- http://www.exploit-db.com/exploits/18420
- http://www.pwnag3.com/2012/01/sysax-multi-server-550-exploit.html
- http://www.securityfocus.com/bid/51548
Products affected by CVE-2012-6530
-
cpe:2.3:a:sysax:multi_server:4.3
-
cpe:2.3:a:sysax:multi_server:4.5
-
cpe:2.3:a:sysax:multi_server:5.50