CVE-2016-20050 NetSchedScan 1.0 Buffer Overflow Denial of Service
MediumCVSS 6.9
EPSS 0.17%
- Published
- Updated
- Exploit status
- No public exploit known
Description
NetSchedScan 1.0 contains a buffer overflow vulnerability in the scan Hostname/IP field that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a crafted payload containing 388 bytes of data followed by 4 bytes of EIP overwrite into the Hostname/IP field to trigger a denial of service condition.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| foundstone NetSchedScan | = 1.0 | No fix listed |
| mcafee netschedscan | = 1.0 | No fix listed |
References
- ExploitDB-39242 exploit vdb-entry
- VulnCheck Advisory: NetSchedScan 1.0 Buffer Overflow Denial of Service third-party-advisory