1. CVE-Search
  2. CVE-2019-6991
ID CVE-2019-6991
Summary A classic Stack-based buffer overflow exists in the zmLoadUser() function in zm_user.cpp of the zmu binary in ZoneMinder through 1.32.3, allowing an unauthenticated attacker to execute code via a long username.
References
Vulnerable Configurations
  • cpe:2.3:a:zoneminder:zoneminder:1.25:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.25:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.26:beta.1:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.26:beta.1:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.26:beta.2:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.26:beta.2:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.26:beta.3:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.26:beta.3:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.26.0:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.26.0:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.26.1:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.26.1:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.26.2:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.26.2:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.26.3:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.26.3:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.26.4:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.26.4:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.26.5:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.26.5:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.27.0:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.27.0:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.28.0:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.28.0:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.28.1:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.28.1:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.29.0:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.29.0:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.29.0:-:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.29.0:-:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.29.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.29.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.29.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.29.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.30.0:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.30.0:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.30.0:-:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.30.0:-:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.30.0:rc1:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.30.0:rc1:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.30.0:rc2:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.30.0:rc2:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.30.1:rc.1:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.30.1:rc.1:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.30.2:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.30.2:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.30.2:-:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.30.2:-:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.30.2:rc.1:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.30.2:rc.1:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.30.3:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.30.3:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.30.4:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.30.4:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.32.0:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.32.0:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.32.1:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.32.1:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.32.2:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.32.2:*:*:*:*:*:*:*
  • cpe:2.3:a:zoneminder:zoneminder:1.32.3:*:*:*:*:*:*:*
    cpe:2.3:a:zoneminder:zoneminder:1.32.3:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
misc
Last major update 24-08-2020 - 17:37
Published 28-01-2019 - 20:29
Last modified 24-08-2020 - 17:37
Back to Top