CVE-2017-17088

The CVE-2017-17088 entry concerns SyncBreeze Enterprise (versions 10.2.12 and earlier). Affected component: the web server’s handling of Host header requests. Root cause: the server does not properly check bounds when reading server requests in the Host header, allowing a Buffer Overflow. Impact:...

CVE-2017-17088: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The web server does not check bounds when reading server requests in the Host header on making a connection, resulting in a classic Buffer Overflow that causes a Denial of Service...

PT-2017-14703

Name of the Vulnerable Software and Affected Versions SyncBreeze versions 10.2.12 and earlier Description The issue is related to a Remote Denial of Service. It occurs because the web server does not check bounds when reading server requests in the Host header, resulting in a Buffer Overflow that...

Sync Breeze 10.2.12 Denial Of Service

============================================= MGC ALERT 2017-007 - Original release date: November 30, 2017 - Last revised: December 14, 2017 - Discovered by: Manuel GarcAa CA!rdenas - Severity: 7,5/10 CVSS Base Score - CVE-ID: CVE-2017-17088 ============================================= I...

Sync Breeze 10.2.12 - Denial of Service Exploit

Exploit for windows platform in category dos / poc ============================================= MGC ALERT 2017-007 - Original release date: November 30, 2017 - Last revised: December 14, 2017 - Discovered by: Manuel García Cárdenas - Severity: 7,5/10 CVSS Base Score - CVE-ID: CVE-2017-17088...

Sync Breeze 10.2.12 - Denial of Service

Sync Breeze 10.2.12 - Denial of Service ============================================= MGC ALERT 2017-007 - Original release date: November 30, 2017 - Last revised: December 14, 2017 - Discovered by: Manuel García Cárdenas - Severity: 7,5/10 CVSS Base Score - CVE-ID: CVE-2017-17088...

Sync Breeze 10.2.12 - Denial of Service

============================================= MGC ALERT 2017-007 - Original release date: November 30, 2017 - Last revised: December 14, 2017 - Discovered by: Manuel García Cárdenas - Severity: 7,5/10 CVSS Base Score - CVE-ID: CVE-2017-17088 ============================================= I...

Flexense SyncBreeze Enterprise HTTP Server Buffer Overflow Vulnerability

Flexense SyncBreeze Enterprise is a set of file synchronization tools from Flexense Canada. The tool has features such as file management and data synchronization.HTTP server is one of the HTTP servers. A buffer overflow vulnerability exists in the HTTP server in Flexense SyncBreeze Enterprise...

CVE-2017-17099

There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possible for a malicious user to overwrite the SEH record and execute a payload that would run under th...

Design/Logic Flaw

There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possible for a malicious user to overwrite the SEH record and execute a payload that would run under th...

CVE-2017-17099

There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possible for a malicious user to overwrite the SEH record and execute a payload that would run under th...

EUVD-2017-8265

There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possible for a malicious user to overwrite the SEH record and execute a payload that would run under th...

CVE-2017-17099

There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possible for a malicious user to overwrite the SEH record and execute a payload that would run under th...

CVE-2017-17099

Summary: CVE-2017-17099 affects Flexense SyncBreeze Enterprise’s HTTP server (v10.1.16). An unauthenticated, SEH-based buffer overflow is triggered by excessively long GET requests, enabling an attacker to overwrite the SEH record and execute payloads as the Windows SYSTEM account. The issue is d...

CVE-2017-17099: Improper Restriction of Operations within the Bounds of a Memory Buffer

There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When sending a GET request with an excessive length, it is possible for a malicious user to overwrite the SEH record and execute a payload that would run under th...

PT-2017-14711

Name of the Vulnerable Software and Affected Versions Flexense SyncBreeze Enterprise version 10.1.16 Description The issue is related to an unauthenticated SEH based Buffer Overflow in the HTTP server. It can be triggered by sending a GET request with an excessive length, allowing a malicious use...

SyncBreeze Enterprise Arbitrary Code Execution Vulnerability

SyncBreeze is a fast, powerful and reliable file synchronization solution for local disks, network shares, NAS storage devices and enterprise storage systems. An arbitrary code execution vulnerability exists in Flexense SyncBreeze Enterprise 10.1.16. An attacker can trigger a buffer overflow by...

CVE-2017-15950

Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an XML document or through use of passive mode...

Buffer overflow

Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an XML document or through use of passive mode...

CVE-2017-15950

Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an XML document or through use of passive mode...