Vulnerability Details : CVE-2011-5033
Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file.
Vulnerability category: OverflowDenial of service
Exploit prediction scoring system (EPSS) score for CVE-2011-5033
Probability of exploitation activity in the next 30 days: 0.08%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 35 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2011-5033
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
4.4
|
MEDIUM | AV:L/AC:M/Au:N/C:P/I:P/A:P |
3.4
|
6.4
|
NIST |
CWE ids for CVE-2011-5033
-
The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2011-5033
-
http://forum.configserver.com/viewtopic.php?f=4&t=5008
SOS CSF Firewall Buffer Overflow SOS - ConfigServer Community Forum
-
http://www.configserver.com/free/csf/changelog.txt
404 Not Found
-
http://www.exploit-db.com/exploits/18225
CSF Firewall - Buffer Overflow (PoC) - Linux dos ExploitExploit
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/71758
ConfigServer Firewall da_csf.cgi buffer overflow CVE-2011-5033 Vulnerability Report
Products affected by CVE-2011-5033
- cpe:2.3:a:configserver:configserver_security_firewall:*:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.35:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.34:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.19:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.18:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.11:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.10:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.03:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.02:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.39:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.38:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.30:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.22:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.15:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.14:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.07:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.06:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.37:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.36:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.21:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.20:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.13:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.12:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.05:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.04:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.41:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.40:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.33:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.32:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.31:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.17:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.16:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.09:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.08:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.01:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server
- cpe:2.3:a:configserver:configserver_security_firewall:5.00:*:*:*:*:*:*:*When used together with: Directadmin » Directadmin Server