Description (CNA)
Multiple Stack-based Buffer Overflow vulnerabilities exists in Sniffit prior to 0.3.7 via a crafted configuration file that will bypass Non-eXecutable bit NX, stack smashing protector SSP, and address space layout randomization ASLR protection mechanisms, which could let a malicious user execute arbitrary code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://packetstormsecurity.com/files/129292/Sniffit-Root-Shell.html
- http://www.securityfocus.com/bid/71318
- http://seclists.org/fulldisclosure/2014/Nov/88
ADP enrichment
No English description supplied.