CVE-2011-3501 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

####################################################################### Luigi Auriemma Application: Cogent DataHub http://www.cogentdatahub.com/Products/Cogent_DataHub.html Versions: <= 7.1.1.63 Platforms: Windows Bug: integer overflow Exploitation: remote Date: 13 Sep 2011 Author: Luigi Auriemma e-mail: aluigi@autistici.org web: aluigi.org ####################################################################### 1) Introduction 2) Bug 3) The Code 4) Fix ####################################################################### =============== 1) Introduction =============== DataHub is a software for the SCADA and automation sector. ####################################################################### ====== 2) Bug ====== The server/service listens on port 80 using a custom web server. The software is affected by an integer overflow caused by the allocation of the amount of memory specified by the Content-Length field (-1 or 4294967295) plus one resulting in a buffer of zero bytes. ####################################################################### =========== 3) The Code =========== http://aluigi.org/poc/cogent_3.dat https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/17839.dat nc SERVER 80 < cogent_3.dat ####################################################################### ====== 4) Fix ====== No fix. #######################################################################