PT-2005-2065 · Opentext+1 · Opentext Firstclass+2

Dila · Publicado 2005-04-12 · Atualizado 2017-07-11 · CVE-2005-1045

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenText FirstClass version 8.0

Description The issue arises from improper sanitization of strings before they are passed to the Windows ShellExecute API. This allows remote attackers to execute arbitrary commands via a UNC path in a bookmark.

Recommendations For OpenText FirstClass version 8.0, consider disabling the use of UNC paths in bookmarks until a patch is available. Restrict access to the Windows ShellExecute API to minimize the risk of exploitation. Avoid using the bookmark feature with UNC paths in the affected version until the issue is resolved.

Correção

Identificadores relacionados

CVE-2005-1045

Produtos afetados

Opentext Firstclass

Windows

Windows Shellexecute Api

Referências · 7

• http://securitytracker.com/id?1013665 · Nota
• http://marc.info/?l=bugtraq&m=111323587931293&w=2 · Nota
• http://secunia.com/advisories/14898 · Aviso do Fabricante
• http://osvdb.org/15356 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1045 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20032 · Nota
• http://securityfocus.com/bid/13079 · Nota