CVE-2010-3894

CVE-2010-3894 : IBM OmniFind Enterprise Edition (before 8.5 FP6) has a stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function (libffq.cryptionjni.so) used by the login form in the administration interface. A long password copied into a fixed 2048-byte buffer can ...

IBM OmniFind Buffer Overflow Vulnerability

Exploit for multiple platform in category dos / poc ========================================== IBM OmniFind Buffer Overflow Vulnerability ========================================== Remote buffer overflow CVE-2010-3894 The administration interface has a login form with an username- and a...

IBM OmniFind - Buffer Overflow

IBM OmniFind - Buffer Overflow Remote buffer overflow CVE-2010-3894 The administration interface has a login form with an username- and a passwordfield. Entering a valid username default value is »esadmin« and a very long string into the password field a buffer overflow is triggered. The function...