Solsoft NSM Format Strings RCE

high Nessus Plugin ID 10540

Synopsis

A firewall proxy application running on the remote host is affected by a remote code execution vulnerability.

Description

The Solsoft NSM application running on the remote host is affected by multiple flaws in ulm logging related to format string processing. An unauthenticated, remote attacker can exploit these to execute arbitrary code.

Solution

If you are using NSM, please contact your vendor for a patch.

See Also

http://www.nessus.org/u?7f17d802

Plugin Details

Severity: High

ID: 10540

File Name: nsm_format_strings.nasl

Version: 1.33

Type: remote

Published: 10/28/2000

Updated: 8/28/2018

Configuration: Enable paranoid mode

Risk Information

CVSS v2

Risk Factor: High

Base Score: 7.5

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: High

Base Score: 7.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Vulnerability Information

Required KB Items: Settings/ParanoidReport

Vulnerability Publication Date: 1/1/2000