Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.cryptionjni.so in the login form in the administration interface in IBM OmniFind Enterprise Edition before 8.5 FP6 allows remote attackers to execute arbitrary code via a long password.
CPE | Name | Operator | Version |
---|---|---|---|
omnifind | eq | 8.0 enterprise | |
omnifind | eq | 6.1 enterprise | |
omnifind | le | 8.5 | |
omnifind | eq | 8.4 enterprise |