10
CVSSv2

CVE-1999-0943

Published: 15/10/1999 Updated: 09/09/2008
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in OpenLink 3.2 allows remote malicious users to gain privileges via a long GET request to the web configurator.

Vulnerable Product Search on Vulmon Subscribe to Product

openlink openlink a

Exploits

source: wwwsecurityfocuscom/bid/720/info Both the Unix and WindowsNT versions of OpenLink 32 are vulnerable to a remotely exploitable buffer overflow attack The problem is in their web configuration utility, and is the result of an unchecked strcpy() call The consequence is the execution of arbitrary code on the target host (running th ...