CVE-2017-15950 Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destinat...
HighCVSS 7.8
EPSS 5.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an XML document or through use of passive mode.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flexense syncbreeze | = 10.1.16 | No fix listed |
References
- packetstormsecurity.com
- seclists.org mailing-list third-party-advisory