CVEvulnerability
CVE-2007-3911
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-07-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple heap-based buffer overflows in (1) clsscheduler.exe (aka scheduler client) and (2) srvscheduler.exe (aka scheduler server) in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests.
Affected configurations
• bakbone netvault reporter (<= 3.5update3)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/26222 Patch, Vendor Advisory
- http://securityreason.com/securityalert/2954 securityreason.com
- http://www.securityfocus.com/archive/1/474626/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25068 www.securityfocus.com
- http://www.securitytracker.com/id?1018460 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/2658 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-07-044.html www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35588 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/26222 Patch, Vendor Advisory
- http://securityreason.com/securityalert/2954 securityreason.com
- http://www.securityfocus.com/archive/1/474626/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25068 www.securityfocus.com
- http://www.securitytracker.com/id?1018460 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/2658 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-07-044.html www.zerodayinitiative.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35588 exchange.xforce.ibmcloud.com