vendor:
Dup Scout Enterprise
by:
vportal, Daniel Teixeira
N/A
CVSS
N/A
Buffer Overflow
119
CWE
Product Name: Dup Scout Enterprise
Affected Version From: v9.5.14
Affected Version To: v9.5.14
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows 7 SP1 x86
2017
Dup Scout Enterprise GET Buffer Overflow
This module exploits a stack-based buffer overflow vulnerability in the web interface of Dup Scout Enterprise v9.5.14, caused by improper bounds checking of the request path in HTTP GET requests sent to the built-in web server. This module has been tested successfully on Windows 7 SP1 x86.
Mitigation:
Update to the latest version of Dup Scout Enterprise