Lucene search
JpcertCVE-2015-0907HistoryApr 15, 2015 - 10:59 a.m.
CVE-2015-0907
2015-04-1510:59:07
CWE-119
jpcert
web.nvd.nist.gov
26
buffer overflow
lhaplus
cve-2015-0907
nvd
security
remote code execution
archive
vulnerability
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
8.1
Confidence
High
EPSS
0.031
Percentile
91.1%
Buffer overflow in Lhaplus before 1.70 allows remote attackers to execute arbitrary code via a crafted archive.
Affected configurations
Node
lhapluslhaplusRange≤1.59
ORlhapluslhaplusMatch1.52
ORlhapluslhaplusMatch1.53
ORlhapluslhaplusMatch1.55
ORlhapluslhaplusMatch1.56
ORlhapluslhaplusMatch1.57
| Vendor | Product | Version | CPE |
|---|---|---|---|
| lhaplus | lhaplus | * | cpe:2.3:a:lhaplus:lhaplus:*:*:*:*:*:*:*:* |
| lhaplus | lhaplus | 1.52 | cpe:2.3:a:lhaplus:lhaplus:1.52:*:*:*:*:*:*:* |
| lhaplus | lhaplus | 1.53 | cpe:2.3:a:lhaplus:lhaplus:1.53:*:*:*:*:*:*:* |
| lhaplus | lhaplus | 1.55 | cpe:2.3:a:lhaplus:lhaplus:1.55:*:*:*:*:*:*:* |
| lhaplus | lhaplus | 1.56 | cpe:2.3:a:lhaplus:lhaplus:1.56:*:*:*:*:*:*:* |
| lhaplus | lhaplus | 1.57 | cpe:2.3:a:lhaplus:lhaplus:1.57:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2015-0907
2015-04-15 10:00:00
nvd
nvd
CVE-2015-0907
2015-04-15 10:59:07
jvn
jvn
JVN#12329472: Lhaplus vulnerable to remote code execution
2015-04-09 00:00:00
prion
prion
Buffer overflow
2015-04-15 10:59:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
8.1
Confidence
High
EPSS
0.031
Percentile
91.1%
Related for CVE-2015-0907