PT-2010-5148 · Ibm · Ibm Omnifind Enterprise Edition

Fatih Kilic · Published 2010-11-12 · Updated 2018-10-10 · CVE-2010-3894

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM OmniFind Enterprise Edition versions prior to 8.5 FP6

Description The issue is related to a stack-based buffer overflow in the Java com ibm es oss CryptionNative ESEncrypt function. This function is located in the /opt/IBM/es/lib/libffq.cryptionjni.so library, which is part of the login form in the administration interface. The overflow can be triggered by a remote attacker using a long password, potentially allowing the execution of arbitrary code.

Recommendations For IBM OmniFind Enterprise Edition versions prior to 8.5 FP6, update to version 8.5 FP6 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-3894

Affected Products

Ibm Omnifind Enterprise Edition

References · 8

• 🔥 https://exploit-db.com/exploits/15474 · Exploit
• 🔥 http://exploit-db.com/exploits/15474 · Exploit
• 🔥 http://security.fatihkilic.de/advisory/fkilic-sa-2010-ibm-omnifind.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-3894 · Security Note
• http://vupen.com/english/advisories/2010/2933 · Note
• http://securityfocus.com/archive/1/514688/100/0/threaded · Note
• http://osvdb.org/69079 · Note
• http://securityfocus.com/bid/44740 · Note