PT-2001-1803 · Headlight · Mygetright

Publicado

2001-07-27

·

Atualizado

2016-10-18

·

CVE-2001-0605

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: Headlight Software MyGetright versions prior to 1.0b
Description: The issue allows a remote attacker to upload and/or overwrite arbitrary files via a malicious .dld (skins-data) file which contains long strings of random data.
Recommendations: For versions prior to 1.0b, update to version 1.0b or later to resolve the issue. As a temporary workaround, consider restricting access to the file upload functionality to minimize the risk of exploitation.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2001-0605

Produtos afetados

Mygetright