CVE-2016-20045

HNB Organizer 1.9.18-10 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized argument to the -rc command-line parameter. Attackers can craft a malicious input string exceeding 108 bytes containing shellcode and a return address to overwrite the stack and achieve code execution.

Score

CVSS 4.0 8.6 High

Status

Analyzed - disclosure@vulncheck.com

Published

2026-03-28

Last modified

2026-10-07

Weaknesses

CWE-787

Affected products

• Hnb (Hnb)
• Hierarchical Notebook (Hnb Project)

References

• https://www.exploit-db.com/exploits/40025
• http://hnb.sourceforge.net/
• https://www.vulncheck.com/advisories/hnb-organizer-10-local-buffer-overflow-via-rc-parameter