CVE-2011-5033

Configserver Security Firewall < 5.42 - Memory Corruption

Title source: rule

Description

Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file.

Exploits (1)

exploitdb WORKING POC
by FoX HaCkEr · cdoslinux
https://www.exploit-db.com/exploits/18225

References (4)

Scores

EPSS 0.0061
EPSS Percentile 69.9%

Details

CWE
CWE-119
Status published
Products (36)
configserver/configserver_security_firewall 5.00
configserver/configserver_security_firewall 5.01
configserver/configserver_security_firewall 5.02
configserver/configserver_security_firewall 5.03
configserver/configserver_security_firewall 5.04
configserver/configserver_security_firewall 5.05
configserver/configserver_security_firewall 5.06
configserver/configserver_security_firewall 5.07
configserver/configserver_security_firewall 5.08
configserver/configserver_security_firewall 5.09
... and 26 more
Published Dec 29, 2011
Tracked Since Feb 18, 2026