CVE-2015-6946

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 21.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2015-09-15 · updated 2026-06-17
Weakness: CWE-119

Description

Multiple stack-based buffer overflows in the Reprise License Manager service in Borland AccuRev allow remote attackers to execute arbitrary code via the (1) akey or (2) actserver parameter to the activate_doit function or (3) licfile parameter to the service_startup_doit functionality.

Affected products

Microfocus Accurev: all versions

References

http://www.zerodayinitiative.com/advisories/ZDI-15-412
http://www.zerodayinitiative.com/advisories/ZDI-15-414/
http://www.zerodayinitiative.com/advisories/ZDI-15-416
https://redr2e.com/cve-to-poc-cve-2015-6946/
http://www.zerodayinitiative.com/advisories/ZDI-15-412
http://www.zerodayinitiative.com/advisories/ZDI-15-414/
http://www.zerodayinitiative.com/advisories/ZDI-15-416
https://redr2e.com/cve-to-poc-cve-2015-6946/

Get alerted when CVE-2015-6946 or the next vulnerability affects your stack