CVE-2014-3976 Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers to cause a denial of service (crash) and possibly execute arb...
MediumCVSS 5.0
EPSS 11.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in A10 Networks Advanced Core Operating System (ACOS) before 2.7.0-p6 and 2.7.1 before 2.7.1-P1_55 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long session id in the URI to sys_reboot.html. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| a10networks advanced core operating system | = 2.7.0 | No fix listed |
| a10networks advanced core operating system | = 2.7.1 | No fix listed |
References
- 105354 vdb-entry
- packetstormsecurity.com exploit
- 20140402 [Quantum Leap Advisory] #QLA140402 - A10 Networks remote Buffer Overflow exploit mailing-list
- 57640 third-party-advisory
- 32702 exploit
- www.quantumleap.it exploit
- 66588 vdb-entry