CVE-2017-17996
Summary
| CVE | CVE-2017-17996 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-02-06 16:29:00 UTC |
| Updated | 2018-02-27 16:20:00 UTC |
| Description | A buffer overflow vulnerability in "Add command" functionality exists in Flexense SyncBreeze Enterprise <= 10.3.14. The vulnerability can be triggered by an authenticated attacker who submits more than 5000 characters as the command name. It will cause termination of the SyncBreeze Enterprise server and possibly remote command execution with SYSTEM privilege. |
Risk And Classification
Problem Types: CWE-119
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Flexense | Syncbreeze | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Full Disclosure: Flexense SyncBreeze Entreprise 10.3.14 Buffer Overflow (SEH-bypass) | FULLDISC | seclists.org | Exploit, Mailing List, Third Party Advisory |
| Flexense SyncBreeze Entreprise 10.3.14 Buffer Overflow (SEH-bypass) | MISC | www.ryantzj.com | Exploit, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.