vendor:
IMSPD
by:
Carlos Barros
7.5
CVSS
HIGH
Remote Code Execution
119
CWE
Product Name: IMSPD
Affected Version From: Unknown
Affected Version To: Unknown
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
Unknown
Cyrus IMSPD Remote Root Exploit
A remote attacker can gain unauthorized access to a system using the vulnerable software by exploiting a buffer overflow vulnerability in the 'abook_dbname' function. By sending a long argument with the FETCHADDRESS command, the attacker can cause a buffer overflow and execute arbitrary commands.
Mitigation:
Apply the vendor's patch or upgrade to a non-vulnerable version of the software.