CVE-2014-5501 – Stack-based buffer overflow in the diagnose service in the Sophos Cyberoa

5 years ago

Stack-based buffer overflow in the diagnose service in the Sophos Cyberoam appliances with CyberoamOS before 10.6.1 GA allows remote attackers to execute arbitrary code via a crafted webpage or file.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-5501

Reference (s):

http://kb.cyberoam.com/default.asp?id=3049
http://www.zerodayinitiative.com/advisories/ZDI-14-334/