Unscored severity · published Dec 29, 2011
CVE-2011-5033
Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service…
–
CVSS
0.7%
EPSS
No
On KEV
Description
Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 52% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Configserver Security Firewall · Configserver
through 5.42; 5.00; 5.01; 5.02; 5.03; 5.04; +30 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-5033
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-5033
forum.configserver.com
http://forum.configserver.com/viewtopic.php?f=4&t=5008
www.configserver.com
http://www.configserver.com/free/csf/changelog.txt
Exploit
http://www.exploit-db.com/exploits/18225
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/71758
More from Configserver Security Firewall
9.5
CVE-2026-65639
OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary…
9.2
CVE-2026-65638
Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via…
9.2
CVE-2026-67402
An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host