![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
CVE ID: | CVE-2014-5439 |
Description: | Multiple Stack-based Buffer Overflow vulnerabilities exists in Sniffit prior to 0.3.7 via a crafted configuration file that will bypass Non- eXecutable bit NX, stack smashing protector SSP, and address space layout randomization ASLR protection mechanisms, which could let a malicious user execute arbitrary code. |
Test IDs: | 1.3.6.1.4.1.25623.1.1.1.2.2016.713 1.3.6.1.4.1.25623.1.0.844736 |
Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2014-5439 http://packetstormsecurity.com/files/129292/Sniffit-Root-Shell.html http://seclists.org/fulldisclosure/2014/Nov/88 http://www.securityfocus.com/bid/71318 |