CVE-2016-20045 - Vulnerability Analysis

Overview

HNB Organizer 1.9.18-10 contains a local buffer overflow caused by an oversized argument to the -rc command-line parameter, letting local attackers execute arbitrary code by overwriting the stack, exploit requires local access.

Severity & Score

Impact

Local attackers can execute arbitrary code, potentially gaining full control of the affected system.

Mitigation

Update to the latest version of HNB Organizer.

References

• http://hnb.sourceforge.net/
• https://www.exploit-db.com/exploits/40025
• https://www.vulncheck.com/advisories/hnb-organizer-10-local-buffer-overflow-via-rc-parameter

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner