CVE-2011-3493 Multiple stack-based buffer overflows in the DH_OneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary...
HighCVSS 10.0
EPSS 8.0%
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in the DH_OneSecondTick function in Cogent DataHub 7.1.1.63 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) domain, (2) report_domain, (3) register_datahub, or (4) slave commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cogentdatahub cogent datahub | <= 7.1.1.63 | No fix listed |
| cogentdatahub cogent datahub | = 7.0 | No fix listed |
| cogentdatahub cogent datahub | = 7.0.2 | No fix listed |
| cogentdatahub cogent datahub | = 7.1.0 | No fix listed |
| cogentdatahub cogent datahub | = 7.1.1 | No fix listed |
References
- aluigi.altervista.org exploit
- www.us-cert.gov us-government-resource