CVE-2014-2597 PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service (disabled keyboard or crash) via a large input buffer to unspecified IOCTL requests in RACDriver.sys, which tri...
MediumCVSS 4.9
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service (disabled keyboard or crash) via a large input buffer to unspecified IOCTL requests in RACDriver.sys, which triggers a buffer over-read.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| remote-rac rac server | = 4.0.4 | No fix listed |
| remote-rac rac server | = 4.0.5 | No fix listed |
References
- 20140416 CVE-2014-2597 - Denial of Service in PCNetSoftware RAC Server mailing-list
- 58090 third-party-advisory vendor-advisory
- www.portcullis-security.com