CWE Code: 120
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Summary: the netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with nt\system privilege, accepts network connections from localhost. the connection handling function in this service suffers from a stack based buffer overflow in "dohandshakefromserver" function. local users can use this vulnerability to trigger a crash of the service and potentially cause additional impact on the system.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-09-26
Last Modified Date: 2019-10-09