CVE-2011-0517 Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code...
HighCVSS 9.3
EPSS 40.5%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sielcosistemi winlog pro | <= 2.07.00 | No fix listed |
References
- aluigi.org exploit
- 70418 vdb-entry
- 42894 third-party-advisory vendor-advisory
- 8280 third-party-advisory
- 15992 exploit
- VU#496040 third-party-advisory us-government-resource
- 45813 exploit vdb-entry
- www.us-cert.gov
- ADV-2011-0126 vdb-entry vendor-advisory
- winlog-tcpip-bo(64716) vdb-entry