Denial of Service : DiskBoss Enterprise Server < 9.0 POST Buffer Overflow Vulnerability

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.107125

Category: Denial of Service

Title: DiskBoss Enterprise Server < 9.0 POST Buffer Overflow Vulnerability - Windows

Summary: DiskBoss Enterprise is prone to a buffer overflow vulnerability.

Description: Summary:
DiskBoss Enterprise is prone to a buffer overflow vulnerability.

Vulnerability Insight:
The flaw is due to an improper validation of
web requests passed via POST request.

Vulnerability Impact:
Successful exploitation may allow remote
attackers to elevate privileges from any account type and execute code.

Affected Software/OS:
DiskBoss Enterprise v7.5.12

Solution:
Update to version 9.0 or later.

CVSS Score:
6.0

CVSS Vector:
AV:N/AC:M/Au:S/C:P/I:P/A:P

Copyright Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.107125
Category:	Denial of Service
Title:	DiskBoss Enterprise Server < 9.0 POST Buffer Overflow Vulnerability - Windows
Summary:	DiskBoss Enterprise is prone to a buffer overflow vulnerability.
Description:	Summary: DiskBoss Enterprise is prone to a buffer overflow vulnerability. Vulnerability Insight: The flaw is due to an improper validation of web requests passed via POST request. Vulnerability Impact: Successful exploitation may allow remote attackers to elevate privileges from any account type and execute code. Affected Software/OS: DiskBoss Enterprise v7.5.12 Solution: Update to version 9.0 or later. CVSS Score: 6.0 CVSS Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P
Copyright	Copyright (C) 2017 Greenbone AG