Lucene search

K
zdiRgodZDI-15-416
HistorySep 02, 2015 - 12:00 a.m.

(0Day) Borland AccuRev Reprise License Server service_setup_doit Command Stack Buffer Overflow Vulnerability

2015-09-0200:00:00
rgod
www.zerodayinitiative.com
37

EPSS

0.951

Percentile

99.4%

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Borland AccuRev. Authentication is not required to exploit this vulnerability. The specific flaw exists within the service_startup_doit functionality of the Reprise License Manager service. The issue lies in the handling of the licfile parameter which can result in overflowing a stack-based buffer. An attacker could leverage this vulnerability to execute code under the context of SYSTEM.

EPSS

0.951

Percentile

99.4%

Related for ZDI-15-416