CVE-2001-0464 — HIGH (10.0)

Vulnerability Description

Buffer overflow in websync.exe in Cyberscheduler allows remote attackers to execute arbitrary commands via a long tzs (timezone) parameter.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Crosswind	Cyberscheduler	2.1

References

http://marc.info/?l=bugtraq&m=98761402029302&w=2
http://www.securityfocus.com/bid/2628ExploitPatchVendor Advisory
http://marc.info/?l=bugtraq&m=98761402029302&w=2
http://www.securityfocus.com/bid/2628ExploitPatchVendor Advisory

FAQ

What is CVE-2001-0464?

CVE-2001-0464 is a vulnerability with a CVSS score of 10.0 (HIGH). Buffer overflow in websync.exe in Cyberscheduler allows remote attackers to execute arbitrary commands via a long tzs (timezone) parameter.

How severe is CVE-2001-0464?

CVE-2001-0464 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2001-0464?

Check the references section above for vendor advisories and patch information. Affected products include: Crosswind Cyberscheduler.