CVE-2011-5033
ConfigServer Security & Firewall < 5.43 - Stack-Based Buffer Overflow via Admin List File
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-5033. PoCs published by FoX HaCkEr.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in CSF Firewall due to unsafe use of fgets() into a fixed-size buffer. The PoC triggers a segmentation fault by overflowing the buffer with a long string, overwriting the EIP register.
Description
Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file.
Exploits (1)
This exploit demonstrates a buffer overflow vulnerability in CSF Firewall due to unsafe use of fgets() into a fixed-size buffer. The PoC triggers a segmentation fault by overflowing the buffer with a long string, overwriting the EIP register.