Search
Find a vulnerability
Search criteria
9 vulnerabilities by ConfigServer
CVE-2026-65639 (GCVE-0-2026-65639)
Vulnerability from nvd – Published: 2026-09-10 16:24 – Updated: 2026-09-10 18:19
VLAI
EPSS
VEX
Summary
OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary commands as root, due to insufficient validation of feed-supplied rule data.
The vulnerability affects versions of the software originally distributed by ConfigServer, as well as versions of the WebPros-maintained fork that contain the vulnerable code. WebPros has addressed the vulnerability in version 16.30. Other forks or independently maintained versions of ConfigServer Security & Firewall (CSF) may also be affected and should be evaluated independently.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-10 18:19 UTC
CWE
- CWE-78 - OS Command Injection
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| WebPros | ConfigServer Security & Firewall |
Affected:
2.15 , < 16.30
(semver)
|
|
| ConfigServer | ConfigServer Security & Firewall |
Affected:
2.15 , < *
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-65639",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-10T18:19:30.960257Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T18:19:47.504Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "ConfigServer Security \u0026 Firewall",
"vendor": "WebPros",
"versions": [
{
"lessThan": "16.30",
"status": "affected",
"version": "2.15",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ConfigServer Security \u0026 Firewall",
"vendor": "ConfigServer",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "2.15",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "OS command injection in the advanced-rule parser of ConfigServer Security \u0026 Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary commands as root, due to insufficient validation of feed-supplied rule data.\n\nThe vulnerability affects versions of the software originally distributed by ConfigServer, as well as versions of the WebPros-maintained fork that contain the vulnerable code. WebPros has addressed the vulnerability in version 16.30. Other forks or independently maintained versions of ConfigServer Security \u0026 Firewall (CSF) may also be affected and should be evaluated independently."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.5,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T16:24:52.871Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://support.cpanel.net/hc/en-us/articles/43387923160343-Security-CVE-2026-65639-CSF-Security-Release"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-65639",
"datePublished": "2026-09-10T16:24:52.871Z",
"dateReserved": "2026-07-22T15:00:06.103Z",
"dateUpdated": "2026-09-10T18:19:47.504Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-65638 (GCVE-0-2026-65638)
Vulnerability from nvd – Published: 2026-09-10 16:24 – Updated: 2026-09-10 18:19
VLAI
EPSS
VEX
Summary
Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via shell command injection.
The vulnerability affects versions of the software originally distributed by ConfigServer, as well as versions of the WebPros-maintained fork that contain the vulnerable code. WebPros has addressed the vulnerability in version 16.30. Other forks or independently maintained versions of ConfigServer Security & Firewall (CSF) may also be affected and should be evaluated independently.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-10 18:19 UTC
CWE
- CWE-78 - OS Command Injection
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| WebPros | ConfigServer Security & Firewall |
Affected:
14.00 , < 16.30
(semver)
|
|
| ConfigServer | ConfigServer Security & Firewall |
Affected:
14.00 , < *
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-65638",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-10T18:19:11.551770Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T18:19:18.373Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "ConfigServer Security \u0026 Firewall",
"vendor": "WebPros",
"versions": [
{
"lessThan": "16.30",
"status": "affected",
"version": "14.00",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ConfigServer Security \u0026 Firewall",
"vendor": "ConfigServer",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "14.00",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper escaping of a request URL in ConfigServer Security \u0026 Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via shell command injection.\n\nThe vulnerability affects versions of the software originally distributed by ConfigServer, as well as versions of the WebPros-maintained fork that contain the vulnerable code. WebPros has addressed the vulnerability in version 16.30. Other forks or independently maintained versions of ConfigServer Security \u0026 Firewall (CSF) may also be affected and should be evaluated independently."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T16:24:52.785Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://support.cpanel.net/hc/en-us/articles/43387915588375-Security-CVE-2026-65638-CSF-Security-Release"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-65638",
"datePublished": "2026-09-10T16:24:52.785Z",
"dateReserved": "2026-07-22T15:00:06.103Z",
"dateUpdated": "2026-09-10T18:19:18.373Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-67402 (GCVE-0-2026-67402)
Vulnerability from nvd – Published: 2026-09-03 23:57 – Updated: 2026-09-04 19:47
VLAI
EPSS
VEX
Summary
An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerability affects installations where CSF Messenger v3 and its HTTPS mode are enabled. WebPros addressed the vulnerability in version 16.31.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-04 19:47 UTC
CWE
- CWE-552 - Files or Directories Accessible to External Parties
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| WebPros | ConfigServer Security & Firewall |
Affected:
14.02 , < 16.31
(semver)
|
|
| ConfigServer | ConfigServer Security & Firewall |
Affected:
14.02 , < *
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-67402",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-04T19:47:27.442444Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-04T19:47:36.330Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "ConfigServer Security \u0026 Firewall",
"vendor": "WebPros",
"versions": [
{
"lessThan": "16.31",
"status": "affected",
"version": "14.02",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ConfigServer Security \u0026 Firewall",
"vendor": "ConfigServer",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "14.02",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An insecure Apache configuration in ConfigServer Security \u0026 Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerability affects installations where CSF Messenger v3 and its HTTPS mode are enabled. WebPros addressed the vulnerability in version 16.31."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-552",
"description": "CWE-552 Files or Directories Accessible to External Parties",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-03T23:57:15.878Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://support.cpanel.net/hc/en-us/articles/43171958716439-Security-CSF-Security-Release-September-3rd-2026"
}
],
"workarounds": [
{
"lang": "en",
"value": "Disable Messenger v3 by setting MESSENGERV3 = \"0\" until version 16.31 can be installed. This is the shipped default."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-67402",
"datePublished": "2026-09-03T23:57:15.878Z",
"dateReserved": "2026-07-29T15:00:02.294Z",
"dateUpdated": "2026-09-04T19:47:36.330Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2011-5033 (GCVE-0-2011-5033)
Vulnerability from nvd – Published: 2011-12-29 22:00 – Updated: 2024-08-07 00:23
VLAI
EPSS
VEX
Summary
Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://www.configserver.com/free/csf/changelog.txt | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.exploit-db.com/exploits/18225 | exploitx_refsource_EXPLOIT-DB |
| http://forum.configserver.com/viewtopic.php?f=4&t=5008 | x_refsource_CONFIRM |
Date Public
2011-12-09 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T00:23:39.571Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.configserver.com/free/csf/changelog.txt"
},
{
"name": "csf-dacsf-bo(71758)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71758"
},
{
"name": "18225",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "http://www.exploit-db.com/exploits/18225"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://forum.configserver.com/viewtopic.php?f=4\u0026t=5008"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-12-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in CFS.c in ConfigServer Security \u0026 Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.configserver.com/free/csf/changelog.txt"
},
{
"name": "csf-dacsf-bo(71758)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71758"
},
{
"name": "18225",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "http://www.exploit-db.com/exploits/18225"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://forum.configserver.com/viewtopic.php?f=4\u0026t=5008"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2011-5033",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Stack-based buffer overflow in CFS.c in ConfigServer Security \u0026 Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.configserver.com/free/csf/changelog.txt",
"refsource": "CONFIRM",
"url": "http://www.configserver.com/free/csf/changelog.txt"
},
{
"name": "csf-dacsf-bo(71758)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71758"
},
{
"name": "18225",
"refsource": "EXPLOIT-DB",
"url": "http://www.exploit-db.com/exploits/18225"
},
{
"name": "http://forum.configserver.com/viewtopic.php?f=4\u0026t=5008",
"refsource": "CONFIRM",
"url": "http://forum.configserver.com/viewtopic.php?f=4\u0026t=5008"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2011-5033",
"datePublished": "2011-12-29T22:00:00.000Z",
"dateReserved": "2011-12-29T00:00:00.000Z",
"dateUpdated": "2024-08-07T00:23:39.571Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2026-65639 (GCVE-0-2026-65639)
Vulnerability from cvelistv5 – Published: 2026-09-10 16:24 – Updated: 2026-09-10 18:19
VLAI
EPSS
VEX
Summary
OS command injection in the advanced-rule parser of ConfigServer Security & Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary commands as root, due to insufficient validation of feed-supplied rule data.
The vulnerability affects versions of the software originally distributed by ConfigServer, as well as versions of the WebPros-maintained fork that contain the vulnerable code. WebPros has addressed the vulnerability in version 16.30. Other forks or independently maintained versions of ConfigServer Security & Firewall (CSF) may also be affected and should be evaluated independently.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-10 18:19 UTC
CWE
- CWE-78 - OS Command Injection
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| WebPros | ConfigServer Security & Firewall |
Affected:
2.15 , < 16.30
(semver)
|
|
| ConfigServer | ConfigServer Security & Firewall |
Affected:
2.15 , < *
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-65639",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-10T18:19:30.960257Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T18:19:47.504Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "ConfigServer Security \u0026 Firewall",
"vendor": "WebPros",
"versions": [
{
"lessThan": "16.30",
"status": "affected",
"version": "2.15",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ConfigServer Security \u0026 Firewall",
"vendor": "ConfigServer",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "2.15",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "OS command injection in the advanced-rule parser of ConfigServer Security \u0026 Firewall allows a remote attacker who controls a configured allow/deny feed to execute arbitrary commands as root, due to insufficient validation of feed-supplied rule data.\n\nThe vulnerability affects versions of the software originally distributed by ConfigServer, as well as versions of the WebPros-maintained fork that contain the vulnerable code. WebPros has addressed the vulnerability in version 16.30. Other forks or independently maintained versions of ConfigServer Security \u0026 Firewall (CSF) may also be affected and should be evaluated independently."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.5,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T16:24:52.871Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://support.cpanel.net/hc/en-us/articles/43387923160343-Security-CVE-2026-65639-CSF-Security-Release"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-65639",
"datePublished": "2026-09-10T16:24:52.871Z",
"dateReserved": "2026-07-22T15:00:06.103Z",
"dateUpdated": "2026-09-10T18:19:47.504Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-65638 (GCVE-0-2026-65638)
Vulnerability from cvelistv5 – Published: 2026-09-10 16:24 – Updated: 2026-09-10 18:19
VLAI
EPSS
VEX
Summary
Improper escaping of a request URL in ConfigServer Security & Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via shell command injection.
The vulnerability affects versions of the software originally distributed by ConfigServer, as well as versions of the WebPros-maintained fork that contain the vulnerable code. WebPros has addressed the vulnerability in version 16.30. Other forks or independently maintained versions of ConfigServer Security & Firewall (CSF) may also be affected and should be evaluated independently.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-10 18:19 UTC
CWE
- CWE-78 - OS Command Injection
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| WebPros | ConfigServer Security & Firewall |
Affected:
14.00 , < 16.30
(semver)
|
|
| ConfigServer | ConfigServer Security & Firewall |
Affected:
14.00 , < *
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-65638",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-10T18:19:11.551770Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T18:19:18.373Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "ConfigServer Security \u0026 Firewall",
"vendor": "WebPros",
"versions": [
{
"lessThan": "16.30",
"status": "affected",
"version": "14.00",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ConfigServer Security \u0026 Firewall",
"vendor": "ConfigServer",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "14.00",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Improper escaping of a request URL in ConfigServer Security \u0026 Firewall allows an unauthenticated remote attacker to execute arbitrary commands as the CSF service account via shell command injection.\n\nThe vulnerability affects versions of the software originally distributed by ConfigServer, as well as versions of the WebPros-maintained fork that contain the vulnerable code. WebPros has addressed the vulnerability in version 16.30. Other forks or independently maintained versions of ConfigServer Security \u0026 Firewall (CSF) may also be affected and should be evaluated independently."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78 OS Command Injection",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-10T16:24:52.785Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://support.cpanel.net/hc/en-us/articles/43387915588375-Security-CVE-2026-65638-CSF-Security-Release"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-65638",
"datePublished": "2026-09-10T16:24:52.785Z",
"dateReserved": "2026-07-22T15:00:06.103Z",
"dateUpdated": "2026-09-10T18:19:18.373Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-67402 (GCVE-0-2026-67402)
Vulnerability from cvelistv5 – Published: 2026-09-03 23:57 – Updated: 2026-09-04 19:47
VLAI
EPSS
VEX
Summary
An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerability affects installations where CSF Messenger v3 and its HTTPS mode are enabled. WebPros addressed the vulnerability in version 16.31.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-04 19:47 UTC
CWE
- CWE-552 - Files or Directories Accessible to External Parties
Assigner
References
1 reference
Impacted products
2 products
| Vendor | Product | Version | |
|---|---|---|---|
| WebPros | ConfigServer Security & Firewall |
Affected:
14.02 , < 16.31
(semver)
|
|
| ConfigServer | ConfigServer Security & Firewall |
Affected:
14.02 , < *
(semver)
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-67402",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-04T19:47:27.442444Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-04T19:47:36.330Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "ConfigServer Security \u0026 Firewall",
"vendor": "WebPros",
"versions": [
{
"lessThan": "16.31",
"status": "affected",
"version": "14.02",
"versionType": "semver"
}
]
},
{
"defaultStatus": "unaffected",
"product": "ConfigServer Security \u0026 Firewall",
"vendor": "ConfigServer",
"versions": [
{
"lessThan": "*",
"status": "affected",
"version": "14.02",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An insecure Apache configuration in ConfigServer Security \u0026 Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker whose address is blocked can request a mapped executable and run arbitrary commands as the Apache user. The vulnerability affects installations where CSF Messenger v3 and its HTTPS mode are enabled. WebPros addressed the vulnerability in version 16.31."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 9.2,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:N",
"version": "4.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-552",
"description": "CWE-552 Files or Directories Accessible to External Parties",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-03T23:57:15.878Z",
"orgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"shortName": "hackerone"
},
"references": [
{
"url": "https://support.cpanel.net/hc/en-us/articles/43171958716439-Security-CSF-Security-Release-September-3rd-2026"
}
],
"workarounds": [
{
"lang": "en",
"value": "Disable Messenger v3 by setting MESSENGERV3 = \"0\" until version 16.31 can be installed. This is the shipped default."
}
]
}
},
"cveMetadata": {
"assignerOrgId": "36234546-b8fa-4601-9d6f-f4e334aa8ea1",
"assignerShortName": "hackerone",
"cveId": "CVE-2026-67402",
"datePublished": "2026-09-03T23:57:15.878Z",
"dateReserved": "2026-07-29T15:00:02.294Z",
"dateUpdated": "2026-09-04T19:47:36.330Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2011-5033 (GCVE-0-2011-5033)
Vulnerability from cvelistv5 – Published: 2011-12-29 22:00 – Updated: 2024-08-07 00:23
VLAI
EPSS
VEX
Summary
Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
4 references
| URL | Tags |
|---|---|
| http://www.configserver.com/free/csf/changelog.txt | x_refsource_CONFIRM |
| https://exchange.xforce.ibmcloud.com/vulnerabilit… | vdb-entryx_refsource_XF |
| http://www.exploit-db.com/exploits/18225 | exploitx_refsource_EXPLOIT-DB |
| http://forum.configserver.com/viewtopic.php?f=4&t=5008 | x_refsource_CONFIRM |
Date Public
2011-12-09 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-07T00:23:39.571Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://www.configserver.com/free/csf/changelog.txt"
},
{
"name": "csf-dacsf-bo(71758)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71758"
},
{
"name": "18225",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB",
"x_transferred"
],
"url": "http://www.exploit-db.com/exploits/18225"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://forum.configserver.com/viewtopic.php?f=4\u0026t=5008"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2011-12-09T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "Stack-based buffer overflow in CFS.c in ConfigServer Security \u0026 Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2017-08-28T12:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://www.configserver.com/free/csf/changelog.txt"
},
{
"name": "csf-dacsf-bo(71758)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71758"
},
{
"name": "18225",
"tags": [
"exploit",
"x_refsource_EXPLOIT-DB"
],
"url": "http://www.exploit-db.com/exploits/18225"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://forum.configserver.com/viewtopic.php?f=4\u0026t=5008"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2011-5033",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Stack-based buffer overflow in CFS.c in ConfigServer Security \u0026 Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.configserver.com/free/csf/changelog.txt",
"refsource": "CONFIRM",
"url": "http://www.configserver.com/free/csf/changelog.txt"
},
{
"name": "csf-dacsf-bo(71758)",
"refsource": "XF",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71758"
},
{
"name": "18225",
"refsource": "EXPLOIT-DB",
"url": "http://www.exploit-db.com/exploits/18225"
},
{
"name": "http://forum.configserver.com/viewtopic.php?f=4\u0026t=5008",
"refsource": "CONFIRM",
"url": "http://forum.configserver.com/viewtopic.php?f=4\u0026t=5008"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2011-5033",
"datePublished": "2011-12-29T22:00:00.000Z",
"dateReserved": "2011-12-29T00:00:00.000Z",
"dateUpdated": "2024-08-07T00:23:39.571Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
VAR-201112-0121
Vulnerability from variot - Updated: 2025-04-11 23:18Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file. ConfigServer Firewall is prone to a buffer-overflow vulnerability. Attackers can exploit this issue to execute arbitrary code within the context of the application using the vulnerable control. Failed exploit attempts will result in a denial-of-service condition
Show details on source website{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-201112-0121",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "security firewall",
"scope": "eq",
"trust": 1.7,
"vendor": "configserver",
"version": "5.18"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.7,
"vendor": "configserver",
"version": "5.19"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.7,
"vendor": "configserver",
"version": "5.20"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.7,
"vendor": "configserver",
"version": "5.21"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.7,
"vendor": "configserver",
"version": "5.22"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.7,
"vendor": "configserver",
"version": "5.30"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.7,
"vendor": "configserver",
"version": "5.31"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.7,
"vendor": "configserver",
"version": "5.32"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.7,
"vendor": "configserver",
"version": "5.33"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.7,
"vendor": "configserver",
"version": "5.34"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.00"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.01"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.02"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.03"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.04"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.05"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.06"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.07"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.08"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.09"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.10"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.11"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.12"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.13"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.14"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.15"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.16"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.17"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.35"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.36"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.37"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.38"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.39"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.40"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 1.1,
"vendor": "configserver",
"version": "5.41"
},
{
"model": "security firewall",
"scope": "lte",
"trust": 1.0,
"vendor": "configserver",
"version": "5.42"
},
{
"model": "security \u0026 firewall",
"scope": "lt",
"trust": 0.8,
"vendor": "configserver",
"version": "5.43"
},
{
"model": "to the web configserver firewall",
"scope": "eq",
"trust": 0.3,
"vendor": "way",
"version": "0"
},
{
"model": "security firewall",
"scope": "eq",
"trust": 0.1,
"vendor": "configserver",
"version": "5.42"
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2011-5033"
},
{
"db": "BID",
"id": "51005"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003590"
},
{
"db": "CNNVD",
"id": "CNNVD-201112-487"
},
{
"db": "NVD",
"id": "CVE-2011-5033"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"cpe_match": [
{
"cpe22Uri": "cpe:/a:configserver:configserver_security_firewall",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2011-003590"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "FoX HaCkEr",
"sources": [
{
"db": "BID",
"id": "51005"
},
{
"db": "CNNVD",
"id": "CNNVD-201112-163"
}
],
"trust": 0.9
},
"cve": "CVE-2011-5033",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "nvd@nist.gov",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 3.4,
"id": "CVE-2011-5033",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 1.9,
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"exploitabilityScore": 3.4,
"id": "VHN-52978",
"impactScore": 6.4,
"integrityImpact": "PARTIAL",
"severity": "MEDIUM",
"trust": 0.1,
"vectorString": "AV:L/AC:M/AU:N/C:P/I:P/A:P",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "nvd@nist.gov",
"id": "CVE-2011-5033",
"trust": 1.0,
"value": "MEDIUM"
},
{
"author": "NVD",
"id": "CVE-2011-5033",
"trust": 0.8,
"value": "Medium"
},
{
"author": "CNNVD",
"id": "CNNVD-201112-487",
"trust": 0.6,
"value": "MEDIUM"
},
{
"author": "VULHUB",
"id": "VHN-52978",
"trust": 0.1,
"value": "MEDIUM"
},
{
"author": "VULMON",
"id": "CVE-2011-5033",
"trust": 0.1,
"value": "MEDIUM"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-52978"
},
{
"db": "VULMON",
"id": "CVE-2011-5033"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003590"
},
{
"db": "CNNVD",
"id": "CNNVD-201112-487"
},
{
"db": "NVD",
"id": "CVE-2011-5033"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Stack-based buffer overflow in CFS.c in ConfigServer Security \u0026 Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file. ConfigServer Firewall is prone to a buffer-overflow vulnerability. \nAttackers can exploit this issue to execute arbitrary code within the context of the application using the vulnerable control. Failed exploit attempts will result in a denial-of-service condition",
"sources": [
{
"db": "NVD",
"id": "CVE-2011-5033"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003590"
},
{
"db": "BID",
"id": "51005"
},
{
"db": "VULHUB",
"id": "VHN-52978"
},
{
"db": "VULMON",
"id": "CVE-2011-5033"
}
],
"trust": 2.07
},
"exploit_availability": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/exploit_availability#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"reference": "https://www.scap.org.cn/vuln/vhn-52978",
"trust": 0.1,
"type": "unknown"
},
{
"reference": "https://vulmon.com/exploitdetails?qidtp=exploitdb\u0026qid=18225",
"trust": 0.1,
"type": "exploit"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-52978"
},
{
"db": "VULMON",
"id": "CVE-2011-5033"
}
]
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "NVD",
"id": "CVE-2011-5033",
"trust": 2.9
},
{
"db": "EXPLOIT-DB",
"id": "18225",
"trust": 1.8
},
{
"db": "BID",
"id": "51005",
"trust": 1.1
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003590",
"trust": 0.8
},
{
"db": "CNNVD",
"id": "CNNVD-201112-487",
"trust": 0.7
},
{
"db": "CNNVD",
"id": "CNNVD-201112-163",
"trust": 0.6
},
{
"db": "XF",
"id": "71758",
"trust": 0.6
},
{
"db": "SEEBUG",
"id": "SSVID-72407",
"trust": 0.1
},
{
"db": "VULHUB",
"id": "VHN-52978",
"trust": 0.1
},
{
"db": "VULMON",
"id": "CVE-2011-5033",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-52978"
},
{
"db": "VULMON",
"id": "CVE-2011-5033"
},
{
"db": "BID",
"id": "51005"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003590"
},
{
"db": "CNNVD",
"id": "CNNVD-201112-163"
},
{
"db": "CNNVD",
"id": "CNNVD-201112-487"
},
{
"db": "NVD",
"id": "CVE-2011-5033"
}
]
},
"id": "VAR-201112-0121",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-52978"
}
],
"trust": 0.01
},
"last_update_date": "2025-04-11T23:18:58.938000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "SOS CSF Firewall Buffer Overflow SOS",
"trust": 0.8,
"url": "http://forum.configserver.com/viewtopic.php?f=4\u0026t=5008"
},
{
"title": "changelog",
"trust": 0.8,
"url": "http://www.configserver.com/free/csf/changelog.txt"
},
{
"title": "LinuxFlaw",
"trust": 0.1,
"url": "https://github.com/mudongliang/LinuxFlaw "
},
{
"title": "cve-",
"trust": 0.1,
"url": "https://github.com/oneoy/cve- "
}
],
"sources": [
{
"db": "VULMON",
"id": "CVE-2011-5033"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003590"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-52978"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003590"
},
{
"db": "NVD",
"id": "CVE-2011-5033"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 1.8,
"url": "http://www.configserver.com/free/csf/changelog.txt"
},
{
"trust": 1.8,
"url": "http://www.exploit-db.com/exploits/18225"
},
{
"trust": 1.7,
"url": "http://forum.configserver.com/viewtopic.php?f=4\u0026t=5008"
},
{
"trust": 1.2,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71758"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-5033"
},
{
"trust": 0.8,
"url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-5033"
},
{
"trust": 0.7,
"url": "http://www.securityfocus.com/bid/51005"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/71758"
},
{
"trust": 0.3,
"url": "http://www.configserver.com/cp/csf.html"
},
{
"trust": 0.1,
"url": "http://forum.configserver.com/viewtopic.php?f=4\u0026amp;t=5008"
},
{
"trust": 0.1,
"url": "https://cwe.mitre.org/data/definitions/119.html"
},
{
"trust": 0.1,
"url": "https://nvd.nist.gov"
},
{
"trust": 0.1,
"url": "https://www.exploit-db.com/exploits/18225/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-52978"
},
{
"db": "VULMON",
"id": "CVE-2011-5033"
},
{
"db": "BID",
"id": "51005"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003590"
},
{
"db": "CNNVD",
"id": "CNNVD-201112-163"
},
{
"db": "CNNVD",
"id": "CNNVD-201112-487"
},
{
"db": "NVD",
"id": "CVE-2011-5033"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-52978"
},
{
"db": "VULMON",
"id": "CVE-2011-5033"
},
{
"db": "BID",
"id": "51005"
},
{
"db": "JVNDB",
"id": "JVNDB-2011-003590"
},
{
"db": "CNNVD",
"id": "CNNVD-201112-163"
},
{
"db": "CNNVD",
"id": "CNNVD-201112-487"
},
{
"db": "NVD",
"id": "CVE-2011-5033"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2011-12-29T00:00:00",
"db": "VULHUB",
"id": "VHN-52978"
},
{
"date": "2011-12-29T00:00:00",
"db": "VULMON",
"id": "CVE-2011-5033"
},
{
"date": "2011-12-09T00:00:00",
"db": "BID",
"id": "51005"
},
{
"date": "2012-01-05T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-003590"
},
{
"date": "1900-01-01T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201112-163"
},
{
"date": "2011-12-30T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201112-487"
},
{
"date": "2011-12-29T22:55:02.030000",
"db": "NVD",
"id": "CVE-2011-5033"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2017-08-29T00:00:00",
"db": "VULHUB",
"id": "VHN-52978"
},
{
"date": "2017-08-29T00:00:00",
"db": "VULMON",
"id": "CVE-2011-5033"
},
{
"date": "2012-01-03T22:10:00",
"db": "BID",
"id": "51005"
},
{
"date": "2012-01-05T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2011-003590"
},
{
"date": "2011-12-13T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201112-163"
},
{
"date": "2012-01-06T00:00:00",
"db": "CNNVD",
"id": "CNNVD-201112-487"
},
{
"date": "2025-04-11T00:51:21.963000",
"db": "NVD",
"id": "CVE-2011-5033"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201112-163"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "ConfigServer Firewall Buffer Overflow Vulnerability",
"sources": [
{
"db": "BID",
"id": "51005"
},
{
"db": "CNNVD",
"id": "CNNVD-201112-163"
}
],
"trust": 0.9
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer overflow",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-201112-163"
},
{
"db": "CNNVD",
"id": "CNNVD-201112-487"
}
],
"trust": 1.2
}
}