VULNERABILITY INTELLIGENCE
CVE-2007-3911
CVSS score10 HIGH
EPSS probability6.83%
CISA KEVNot currently listed
Published2007-07-30
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple heap-based buffer overflows in (1) clsscheduler.exe (aka scheduler client) and (2) srvscheduler.exe (aka scheduler server) in BakBone NetVault Reporter 3.5 before Update4 allow remote attackers to execute arbitrary code via long filename arguments in HTTP requests.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer