Cfengine cfservd ReceiveTransaction Function Remote Overflow

NASLDB: Cfengine cfservd ReceiveTransaction Function Remote Overflow

General

ID: 14317
Name: Cfengine cfservd ReceiveTransaction Function Remote Overflow

Summary: check for cfengine flaw based on its version

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Port: 5308
Family: Gain a shell remotely
Type: Local

Description

Cfengine is running on this remote host.

This version has a stack-based buffer overrun vulnerability.

An attacker, exploiting this flaw, would need network access to the
server as well as the ability to send a crafted transaction packet to
the cfservd process. Successful exploitation of this flaw would lead
to arbitrary code being executed on the remote machine or a loss of
service (DoS).