EXODUS BLOG

Month: September 2021

SolarWinds Serv-u File Server Command Injection Vulnerability

SEPTEMBER 27, 2021

EIP-d3400c52 The Serv-U File Server supports site specific commands which may not be universally supported by all FTP clients. Among these is the SITE EXEC command which allows a user to execute programs and scripts...

McAfee DLP Agent Stack Buffer Overflow Remote Code Execution Vulnerability

SEPTEMBER 17, 2021

EIP-035220ca The vulnerability affects both Data Loss Prevention (DLP) Endpoint for Windows and the DLP Discover products from McAfee. The vulnerability is present within the included lasr.dll module, which is part of the Keyview SDK3...

Adobe Acrobat Reader Base URI Unicode String Heap Buffer Overflow Vulnerability

SEPTEMBER 17, 2021

EIP-47ea5148 A heap buffer overflow vulnerability exists in the IA32.api module of Adobe Acrobat and Acrobat Reader DC. Upon parsing a specially crafted PDF document containing URI entries with URI dictionaries and a specially...