Security Advisory

CVE-2019-7713

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-03-26 01:00:49
Last updated 2024-08-04 20:54:28
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. There is a heap-based buffer overflow in the function responsible for printing the shell prompt, when a custom modifier is used to display information such as a process ID, IP address, or current working directory. Modifier expansion triggers this overflow, causing memory corruption or a crash (and also leaks memory address information).