CVE-2011-5033

CVE-2011-5033 describes a stack-based buffer overflow vulnerability in ConfigServer Security & Firewall (CSF) versions prior to 5.43, specifically when deployed on a DirectAdmin server. A local attacker can exploit this by providing a lengthy string in an admin.list file, leading to a denial of service (crash) of the affected system. The vulnerability has a CVSS score of 4.4, indicating moderate severity with local access, medium attack complexity, and potential for partial impact on confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, a Proof-of-Concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.