CVE-2011-5033 Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long str...
MediumCVSS 4.4
EPSS 0.68%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ConfigServer Security & Firewall | <= 5.42 | No fix listed |
| ConfigServer Security & Firewall | = 5.00 | No fix listed |
| ConfigServer Security & Firewall | = 5.01 | No fix listed |
| ConfigServer Security & Firewall | = 5.02 | No fix listed |
| ConfigServer Security & Firewall | = 5.03 | No fix listed |
| ConfigServer Security & Firewall | = 5.04 | No fix listed |
| ConfigServer Security & Firewall | = 5.05 | No fix listed |
| ConfigServer Security & Firewall | = 5.06 | No fix listed |
| ConfigServer Security & Firewall | = 5.07 | No fix listed |
| ConfigServer Security & Firewall | = 5.08 | No fix listed |
| ConfigServer Security & Firewall | = 5.09 | No fix listed |
| ConfigServer Security & Firewall | = 5.10 | No fix listed |
| ConfigServer Security & Firewall | = 5.11 | No fix listed |
| ConfigServer Security & Firewall | = 5.12 | No fix listed |
| ConfigServer Security & Firewall | = 5.13 | No fix listed |
| ConfigServer Security & Firewall | = 5.14 | No fix listed |
| ConfigServer Security & Firewall | = 5.15 | No fix listed |
| ConfigServer Security & Firewall | = 5.16 | No fix listed |
| ConfigServer Security & Firewall | = 5.17 | No fix listed |
| ConfigServer Security & Firewall | = 5.18 | No fix listed |
| ConfigServer Security & Firewall | = 5.19 | No fix listed |
| ConfigServer Security & Firewall | = 5.20 | No fix listed |
| ConfigServer Security & Firewall | = 5.21 | No fix listed |
| ConfigServer Security & Firewall | = 5.22 | No fix listed |
| ConfigServer Security & Firewall | = 5.30 | No fix listed |
Show 11 more
| Product | Affected versions | Fixed in |
|---|---|---|
| ConfigServer Security & Firewall | = 5.31 | No fix listed |
| ConfigServer Security & Firewall | = 5.32 | No fix listed |
| ConfigServer Security & Firewall | = 5.33 | No fix listed |
| ConfigServer Security & Firewall | = 5.34 | No fix listed |
| ConfigServer Security & Firewall | = 5.35 | No fix listed |
| ConfigServer Security & Firewall | = 5.36 | No fix listed |
| ConfigServer Security & Firewall | = 5.37 | No fix listed |
| ConfigServer Security & Firewall | = 5.38 | No fix listed |
| ConfigServer Security & Firewall | = 5.39 | No fix listed |
| ConfigServer Security & Firewall | = 5.40 | No fix listed |
| ConfigServer Security & Firewall | = 5.41 | No fix listed |
References
- forum.configserver.com
- www.configserver.com
- 18225 exploit
- csf-dacsf-bo(71758) vdb-entry