CVE-2010-3894

Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.cryptionjni.so in the login form in the administration interface in IBM OmniFind Enterprise Edition before 8.5 FP6 allows remote attackers to execute arbitrary code via a long password.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

12.02% chance of exploitation in the next 30 days, 96th percentile

Published

2010-11-12

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/15474

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/15474

References

• CVE Record
• NVD entry

Related

• CVE-2010-3893
• CVE-2010-3895
• CVE-2010-3891
• CVE-2010-3899
• CVE-2010-3888
• CVE-2010-3904