Skip to content
OpenAdvisories

Product · Fortra

BoKS Manager

3 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.5

    Fortra BoKS Manager boks_portmux TLS ClientHello out-of-bounds read vulnerability

    Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boks_portmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boks_portmux. Although the daemon is normally restar…

  • High 7.9

    Fortra BoKS Manager bccgethostcert insecure temporary file vulnerability

    Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umask. A local user on the BoKS Master who can read files under BOKS_tmp may be able t…