Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Matt Lytle

Pesquisador deCERT Coordination Center
#20809de 53,633
12.1CVSS total
Vulnerabilidades · 2
Baixa
1
Alta
1
PT-2003-2075
10
2003-12-31
Scriptlogic · Scriptlogic · CVE-2003-1121
**Name of the Vulnerable Software and Affected Versions** ScriptLogic versions prior to 4.14 **Description** The issue allows remote attackers to modify arbitrary registry entries via the ScriptLogic RPC service or modify arbitrary configuration via the RunAdmin services. This is due to services processing client requests at raised privileges. **Recommendations** For versions prior to 4.14, update to version 4.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the ScriptLogic RPC service and the RunAdmin services (SLRAserver.exe and SLRAclient.exe) to minimize the risk of exploitation.
PT-2003-2076
2.1
2003-12-31
Scriptlogic · Scriptlogic · CVE-2003-1122
**Name of the Vulnerable Software and Affected Versions** ScriptLogic versions prior to 4.14 **Description** The issue allows users to modify log records and possibly execute arbitrary code due to insecure permissions for the LOGS$ share. **Recommendations** For versions prior to 4.14, update to version 4.14 or later to resolve the issue.