EXPLOIT iSCSI target Multiple Implementations iSNS Stack overflow (CVE-2010-2221)

Rule ID

1054217

Severity

High

Description

A stack buffer overflow vulnerability exist in iscsitarget, an openimplementation of iSCSI Enterprise Target. The vulnerability is caused byinsufficient boundary checking while processing iSNS messages. A remoteattacker can leverage this vulnerability to inject and execute arbitrary codeon a vulnerable system.

Impact

Remote code execution

Recommendation

Update vendor's patch.

IPS Category

Exploits

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

N/A