Vulnerability Description
Stack-based buffer overflow in the handle_debug_network function in the manager in Websense Content Gateway before 8.0.0 HF02 allows remote administrators to cause a denial of service (crash) via a crafted diagnostic command line request to submit_net_debug.cgi.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Websense | Content Gateway | 8.0.0 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/132968/Websense-Triton-Content-Manager-8.0.Exploit
- http://seclists.org/fulldisclosure/2015/Aug/8Exploit
- http://www.securityfocus.com/archive/1/536138/100/0/threaded
- http://www.securitytracker.com/id/1033263
- http://www.websense.com/support/article/kbarticle/v8-0-0-About-Hotfix-02-for-WebVendor Advisory
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150805-Exploit
- http://packetstormsecurity.com/files/132968/Websense-Triton-Content-Manager-8.0.Exploit
- http://seclists.org/fulldisclosure/2015/Aug/8Exploit
- http://www.securityfocus.com/archive/1/536138/100/0/threaded
- http://www.securitytracker.com/id/1033263
- http://www.websense.com/support/article/kbarticle/v8-0-0-About-Hotfix-02-for-WebVendor Advisory
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20150805-Exploit
FAQ
What is CVE-2015-5718?
CVE-2015-5718 is a vulnerability with a CVSS score of 4.0 (MEDIUM). Stack-based buffer overflow in the handle_debug_network function in the manager in Websense Content Gateway before 8.0.0 HF02 allows remote administrators to cause a denial of service (crash) via a cr...
How severe is CVE-2015-5718?
CVE-2015-5718 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-5718?
Check the references section above for vendor advisories and patch information. Affected products include: Websense Content Gateway.