Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-119,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| configserver | configserver_security_firewall | 5.39 |
| configserver | configserver_security_firewall | 5.14 |
| configserver | configserver_security_firewall | 5.17 |
| configserver | configserver_security_firewall | 5.05 |
| configserver | configserver_security_firewall | 5.40 |
| configserver | configserver_security_firewall | 5.41 |
| configserver | configserver_security_firewall | 5.31 |
| configserver | configserver_security_firewall | 5.21 |
| configserver | configserver_security_firewall | 5.15 |
| configserver | configserver_security_firewall | 5.18 |
| configserver | configserver_security_firewall | 5.00 |
| configserver | configserver_security_firewall | 5.34 |
| configserver | configserver_security_firewall | 5.36 |
| configserver | configserver_security_firewall | 5.35 |
| configserver | configserver_security_firewall | 5.12 |
| configserver | configserver_security_firewall | 5.33 |
| configserver | configserver_security_firewall | 5.09 |
| configserver | configserver_security_firewall | 5.10 |
| configserver | configserver_security_firewall | 5.13 |
| configserver | configserver_security_firewall | 5.11 |
| configserver | configserver_security_firewall | 5.01 |
| configserver | configserver_security_firewall | 5.38 |
| configserver | configserver_security_firewall | 5.07 |
| configserver | configserver_security_firewall | 5.19 |
| configserver | configserver_security_firewall | 5.37 |
| configserver | configserver_security_firewall | 5.06 |
| configserver | configserver_security_firewall | 5.20 |
| configserver | configserver_security_firewall | 5.04 |
| configserver | configserver_security_firewall | * |
| configserver | configserver_security_firewall | 5.32 |
| configserver | configserver_security_firewall | 5.22 |
| configserver | configserver_security_firewall | 5.30 |
| configserver | configserver_security_firewall | 5.08 |
| configserver | configserver_security_firewall | 5.02 |
| configserver | configserver_security_firewall | 5.03 |
| configserver | configserver_security_firewall | 5.16 |