CVE-2017-6506

In Azure Data Expert Ultimate 2.2.16, the SMTP verification function suffers from a buffer overflow vulnerability, leading to remote code execution. The attack vector is a crafted SMTP daemon that sends a long 220 (aka "Service ready") string.
Configurations

Configuration 1 (hide)

cpe:2.3:a:azure_dex:data_expert_ultimate:2.2.16:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-03-10 10:59

Updated : 2023-12-10 12:01


NVD link : CVE-2017-6506

Mitre link : CVE-2017-6506

CVE.ORG link : CVE-2017-6506


JSON object : View

Products Affected

azure_dex

  • data_expert_ultimate
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer