[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253390

 
 

909

 
 

197257

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2015-3036Date: (C)2015-06-04   (M)2023-12-22


Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in certain NETGEAR products, TP-LINK products, and other products, allows remote attackers to execute arbitrary code by providing a long computer name in a session on TCP port 20005.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 10.0
Exploit Score: 10.0
Impact Score: 10.0
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE
  
Reference:
SECTRACK-1032377
http://seclists.org/fulldisclosure/2015/May/74
http://seclists.org/fulldisclosure/2015/Oct/50
EXPLOIT-DB-38454
EXPLOIT-DB-38566
BID-74724
VU#177092
http://blog.sec-consult.com/2015/05/kcodes-netusb-how-small-taiwanese.html
http://packetstormsecurity.com/files/131987/KCodes-NetUSB-Buffer-Overflow.html
http://packetstormsecurity.com/files/133919/NetUSB-Stack-Buffer-Overflow.html
https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150519-0_KCodes_NetUSB_Kernel_Stack_Buffer_Overflow_v10.txt

CWE    1
CWE-119

© SecPod Technologies