PT-2015-5956 · Idera · Idera Uptime Infrastructure Monitor

Matthew Benton + 1 · Publicado 2015-12-31 · Atualizado 2015-12-31 · CVE-2015-2894

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Idera Uptime Infrastructure Monitor versions 6.0 through 7.2

Description The issue is related to a format string vulnerability in the up.time client, which can be exploited by remote attackers to cause a denial of service, resulting in an application crash. This is achieved through the use of format string specifiers.

Recommendations For Idera Uptime Infrastructure Monitor versions 6.0 through 7.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2015-2894

Produtos afetados

Idera Uptime Infrastructure Monitor

Referências · 2

• https://kb.cert.org/vuls/id/377260 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-2894 · Nota de Segurança