Lucene search
HistoryMay 29, 2015 - 3:59 p.m.
CVE-2015-4067
cve-2015-4067
integer overflow
dell netvault backup
remote code execution
crafted template string specifiers
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.2 High
AI Score
Confidence
High
0.61 Medium
EPSS
Percentile
97.8%
Integer overflow in the libnv6 module in Dell NetVault Backup before 10.0.5 allows remote attackers to execute arbitrary code via crafted template string specifiers in a serialized object, which triggers a heap-based buffer overflow.
Affected configurations
Node
dellnetvault_backupMatch10.0.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| dell:netvault_backup | dell netvault backup | eq | 10.0.5 |
Related
zdi
zdi
openvas
openvas
Dell Netvault Backup Integer Overflow Vulnerability
2015-06-17 00:00:00
prion
prion
Integer overflow
2015-05-29 15:59:00
cvelist
cvelist
CVE-2015-4067
2015-05-29 15:00:00
nvd
nvd
CVE-2015-4067
2015-05-29 15:59:22
nessus
nessus
Dell NetVault Backup 10.0.x < 10.0.5 RCE
2015-06-05 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
8.2 High
AI Score
Confidence
High
0.61 Medium
EPSS
Percentile
97.8%
Related for CVE-2015-4067