Buffer overflow in Microfocus Security Solutions For Iseries

CVE-2015-0795

Multiple stack-based buffer overflows in the SafeShellExecute method in the NetIQExecObject.NetIQExec.1 ActiveX control in NetIQExec.dll in NetIQ Security Solutions for iSeries 8.1 allow remote attackers to execute arbitrary code via long arguments, aka ZDI-CAN-2699.

Vulnerability class: Buffer Overflow

EPSS: 0.037 (88.5th percentile) — read the EPSS interpretation.

Affected products

Microfocus Security_solutions_for_iseries — versions 8.1
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

security@opentext.com (x_refsource_MISC)
security@opentext.com (x_refsource_CONFIRM)