PT-2015-5956 · Idera · Idera Uptime Infrastructure Monitor

Matthew Benton + 1 · Published 2015-12-31 · Updated 2015-12-31 · CVE-2015-2894

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Idera Uptime Infrastructure Monitor versions 6.0 through 7.2

Description The issue is related to a format string vulnerability in the up.time client, which can be exploited by remote attackers to cause a denial of service, resulting in an application crash. This is achieved through the use of format string specifiers.

Recommendations For Idera Uptime Infrastructure Monitor versions 6.0 through 7.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2015-2894

Affected Products

Idera Uptime Infrastructure Monitor

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2015-2894 · Security Note
• https://kb.cert.org/vuls/id/377260 · Note