Lucene search

K
zdiRgodZDI-15-414
HistorySep 02, 2015 - 12:00 a.m.

(0Day) Borland AccuRev Reprise License Server activate_doit Command actserver Parameter Stack Buffer Overflow Vulnerability

2015-09-0200:00:00
rgod
www.zerodayinitiative.com
12

0.954 High

EPSS

Percentile

99.4%

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Borland AccuRev. Authentication is not required to exploit this vulnerability. The specific flaw exists within the activate_doit function of the service. The issue lies in the handling of the actserver parameter which can result in overflowing a stack-based buffer. An attacker could leverage this vulnerability to execute code under the context of SYSTEM.

0.954 High

EPSS

Percentile

99.4%

Related for ZDI-15-414