CVEvulnerability
CVE-2009-0849
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-03-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the DtbClsLogin function in NovaStor NovaNET 12 allows remote attackers to (1) execute arbitrary code on Linux platforms via a long username field during backup domain authentication, related to libnnlindtb.so; or (2) cause a denial of service (daemon crash) on Windows platforms via a long username field during backup domain authentication, related to nnwindtb.dll. NOTE: some of these details are obtained from third party information.
Affected configurations
• novastor novanet 12
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/52301 Broken Link
- http://osvdb.org/52302 Broken Link
- http://secunia.com/advisories/34024 Vendor Advisory
- http://www.insight-tech.org/index.php?p=NovaNET-12-Remote-Buffer-Oveflow URL Repurposed
- http://www.securityfocus.com/bid/33954 Exploit, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49074 VDB Entry
- http://osvdb.org/52301 Broken Link
- http://osvdb.org/52302 Broken Link
- http://secunia.com/advisories/34024 Vendor Advisory
- http://www.insight-tech.org/index.php?p=NovaNET-12-Remote-Buffer-Oveflow URL Repurposed
- http://www.securityfocus.com/bid/33954 Exploit, Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49074 VDB Entry