Unscored severity · published Jul 30, 2007
CVE-2007-3911
Multiple heap-based buffer overflows in (1) clsscheduler.exe (aka scheduler client) and (2) srvscheduler.exe (aka scheduler server) in BakBone NetVault Reporter 3.5 before Update4…
–
CVSS
6.8%
EPSS
No
On KEV
Description
Multiple heap-based buffer overflows in (1) clsscheduler.exe (aka scheduler client) and (2) srvscheduler.exe (aka scheduler server) in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.8% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NR
Netvault Reporter · Bakbone
through 3.5update3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-3911
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-3911
Patch
http://secunia.com/advisories/26222
securityreason.com
http://securityreason.com/securityalert/2954
www.securityfocus.com
http://www.securityfocus.com/archive/1/474626/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/25068
www.securitytracker.com
http://www.securitytracker.com/id?1018460
www.vupen.com
http://www.vupen.com/english/advisories/2007/2658