CVE-2011-5033: Buffer Overflow
Published Dec 29, 2011
·Updated
Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file.
Affected Software
37 affected components
ConfigServer Configserver Security Firewall<=5.42
ConfigServer Configserver Security Firewall=5.00
ConfigServer Configserver Security Firewall=5.01
ConfigServer Configserver Security Firewall=5.02
ConfigServer Configserver Security Firewall=5.03
ConfigServer Configserver Security Firewall=5.04
ConfigServer Configserver Security Firewall=5.05
ConfigServer Configserver Security Firewall=5.06
ConfigServer Configserver Security Firewall=5.07
ConfigServer Configserver Security Firewall=5.08
ConfigServer Configserver Security Firewall=5.09
ConfigServer Configserver Security Firewall=5.10
ConfigServer Configserver Security Firewall=5.11
ConfigServer Configserver Security Firewall=5.12
ConfigServer Configserver Security Firewall=5.13
ConfigServer Configserver Security Firewall=5.14
ConfigServer Configserver Security Firewall=5.15
ConfigServer Configserver Security Firewall=5.16
ConfigServer Configserver Security Firewall=5.17
ConfigServer Configserver Security Firewall=5.18
ConfigServer Configserver Security Firewall=5.19
ConfigServer Configserver Security Firewall=5.20
ConfigServer Configserver Security Firewall=5.21
ConfigServer Configserver Security Firewall=5.22
ConfigServer Configserver Security Firewall=5.30
ConfigServer Configserver Security Firewall=5.31
ConfigServer Configserver Security Firewall=5.32
ConfigServer Configserver Security Firewall=5.33
ConfigServer Configserver Security Firewall=5.34
ConfigServer Configserver Security Firewall=5.35
ConfigServer Configserver Security Firewall=5.36
ConfigServer Configserver Security Firewall=5.37
ConfigServer Configserver Security Firewall=5.38
ConfigServer Configserver Security Firewall=5.39
ConfigServer Configserver Security Firewall=5.40
ConfigServer Configserver Security Firewall=5.41
DirectAdmin DirectAdmin server
Event History
Dec 29, 2011
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
10:55 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2011-5033?
CVE-2011-5033 has a medium severity, allowing for potential denial of service on affected systems.
2
How do I fix CVE-2011-5033?
To fix CVE-2011-5033, upgrade ConfigServer Security & Firewall to version 5.43 or later.
3
Which software versions are affected by CVE-2011-5033?
CVE-2011-5033 affects all ConfigServer Security & Firewall versions prior to 5.43 on DirectAdmin servers.
4
What type of vulnerability is CVE-2011-5033?
CVE-2011-5033 is a stack-based buffer overflow vulnerability.
5
Who is impacted by CVE-2011-5033?
Local users with access to the admin.list file on affected DirectAdmin servers are impacted by CVE-2011-5033.