Lucene search

K
cveFlexeraCVE-2013-3249
HistoryMar 20, 2014 - 4:55 p.m.

CVE-2013-3249

2014-03-2016:55:11
CWE-787
flexera
web.nvd.nist.gov
31
cve-2013-3249
buffer overflow
dameware
remote support
security vulnerability
arbitrary code execution
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.032

Percentile

91.2%

Stack-based buffer overflow in the “Add from text file” feature in the DameWare Exporter tool (DWExporter.exe) in DameWare Remote Support 10.0.0.372, 9.0.1.247, and earlier allows user-assisted attackers to execute arbitrary code via unspecified vectors.

Affected configurations

Nvd
Node
solarwindsdameware_remote_supportRange9.0.1.247
OR
solarwindsdameware_remote_supportRange10.010.0.0.372
VendorProductVersionCPE
solarwindsdameware_remote_support*cpe:2.3:a:solarwinds:dameware_remote_support:*:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

Low

EPSS

0.032

Percentile

91.2%