Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary code via a crafted webpage or file.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5501
Reference (s):
- http://kb.cyberoam.com/default.asp?id=3049
- http://www.zerodayinitiative.com/advisories/ZDI-14-334/