PT-2003-2075 · Scriptlogic · Scriptlogic

Art Manion + 2 · Publicado 2003-12-31 · Atualizado 2017-07-11 · CVE-2003-1121

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ScriptLogic versions prior to 4.14

Description The issue allows remote attackers to modify arbitrary registry entries via the ScriptLogic RPC service or modify arbitrary configuration via the RunAdmin services. This is due to services processing client requests at raised privileges.

Recommendations For versions prior to 4.14, update to version 4.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the ScriptLogic RPC service and the RunAdmin services (SLRAserver.exe and SLRAclient.exe) to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2003-1121

Produtos afetados

Scriptlogic

Referências · 9

• http://kb.cert.org/vuls/id/609137 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11920 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11921 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1121 · Nota de Segurança
• http://kb.cert.org/vuls/id/CRDY-5EXQRP · Nota
• http://kb.cert.org/vuls/id/231705 · Nota
• http://securityfocus.com/bid/7475 · Correção
• http://securityfocus.com/bid/7477 · Correção
• http://kb.cert.org/vuls/id/CRDY-5EXQSV · Nota