Lucene search

K
nessusTenable5511.PRM
HistoryApr 15, 2010 - 12:00 a.m.

RealNetworks Helix Server 11.x / 12.x / 13.x Multiple Vulnerabilities

2010-04-1500:00:00
Tenable
www.tenable.com
7

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.937 High

EPSS

Percentile

99.1%

According to its banner, the remote host is running version 11.x, 12.x, or 13.x of RealNetworks Helix Server / Helix Mobile Server. Such versions are potentially affected by multiple vulnerabilities.

  • A heap overflow exists in the NTLM authentication code related to invalid Base64 encoding. (CVE-2010-1317)

  • A stack-based buffer overflow within AgentX++ could lead to arbitrary code execution. (CVE-2010-1318)

  • An integer overflow within AgentX++ could lead to arbitrary code execution. (CVE-2010-1319)

Binary data 5511.prm

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.937 High

EPSS

Percentile

99.1%