What’s Vulnerable › Vulnerabilities

CVE-2015-0795

• Severity: medium (CVSS 6.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-07-18 · updated 2026-06-17
• Weakness: CWE-119

Description

Multiple stack-based buffer overflows in the SafeShellExecute method in the NetIQExecObject.NetIQExec.1 ActiveX control in NetIQExec.dll in NetIQ Security Solutions for iSeries 8.1 allow remote attackers to execute arbitrary code via long arguments, aka ZDI-CAN-2699.

Affected products

• Microfocus Security Solutions For Iseries: 8.1

References

• http://www.zerodayinitiative.com/advisories/ZDI-15-340/
• https://www.netiq.com/support/kb/doc.php?id=7016656
• http://www.zerodayinitiative.com/advisories/ZDI-15-340/
• https://www.netiq.com/support/kb/doc.php?id=7016656

Get alerted when CVE-2015-0795 or the next vulnerability affects your stack