HTTP: Flexense DiskPulse Client Import Stack Buffer Overflow
A stack buffer overflow vulnerability has been reported in the client component of Disk Pulse Enterprise Server. A remote, unauthenticated attacker could exploit this vulnerability by enticing a victim user to download a malicious XML file and process it with the affected application. Successful exploitation allows the attacker to execute arbitrary code in the security context of the user.
References
URL: http://www.zerodayinitiative.com/advisories/zdi-18-1109/
Short Name
HTTP:STC:DISK-PULSE-BO
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
Buffer Client DiskPulse Flexense Import Overflow Stack
Release Date
11/28/2017
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
srx-branch-12.3
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx-12.3
vmx-19.3
srx-12.3
Sigpack Version
3666
False Positive
Unknown