Detections
Analytics
Dup Scout HTTP POST Request Handling Remote Stack Buffer Overflow
critical Nessus Plugin ID 110555
Language:
Synopsis
The remote host is affected by a buffer overflow vulnerability.Description
Dup Scout product contains an overflow condition that is triggered when handling overly large HTTP POST requests e.g. sent to /login. This may allow a remote attacker to cause a stack-based buffer overflow and execute arbitrary code.Solution
Upgrade to Dup Scout 10.6 or later.See Also
Plugin Details
Severity: Critical
ID: 110555
File Name: dupscout_10_6.nasl
Version: 1.2
Type: remote
Family: CGI abuses
Published: 6/15/2018
Updated: 6/18/2018
Supported Sensors: Nessus
Vulnerability Information
CPE: cpe:/a:flexense:dupscout
Required KB Items: installed_sw/Dup Scout
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/6/2016
Vulnerability Publication Date: 10/6/2016