Detections
Analytics

Solsoft NSM Format Strings RCE

high Nessus Plugin ID 10540

Synopsis

A firewall proxy application running on the remote host is affected by a remote code execution vulnerability.

Description

The Solsoft NSM application running on the remote host is affected by multiple flaws in ulm logging related to format string processing. An unauthenticated, remote attacker can exploit these to execute arbitrary code.

Solution

If you are using NSM, please contact your vendor for a patch.

See Also

http://www.nessus.org/u?7f17d802

Plugin Details

Severity: High

ID: 10540

File Name: nsm_format_strings.nasl

Version: 1.34

Type: remote

Published: 10/28/2000

Updated: 1/16/2024

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

CVSS Score Rationale: Score based on an in-depth analysis by tenable.

CVSS v2

Risk Factor: High

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: manual

CVSS v3

Risk Factor: High

Base Score: 7.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Vulnerability Information

Required KB Items: Settings/ParanoidReport

Vulnerability Publication Date: 1/1/2000