PT-2005-5288 · Efilego · Efilego

Publicado 2005-12-31 · Atualizado 2008-09-05 · CVE-2005-4622

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions eFileGo version 3.01

Description A directory traversal issue allows remote attackers to execute arbitrary code, read arbitrary files, and upload arbitrary files. This can be achieved by including a (triple dot) in the URL on port 608 or in the argument to upload.exe.

Recommendations For eFileGo version 3.01, consider restricting access to the upload.exe and limiting the ability to execute arbitrary code or upload files until a fix is available. As a temporary workaround, avoid using the (triple dot) in the URL on port 608 and in arguments to upload.exe to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-4622

Produtos afetados

Efilego

Referências · 7

• 🔥 http://secunia.com/advisories/18279 · Exploit
• 🔥 http://securityfocus.com/bid/16124 · Exploit
• 🔥 https://exploit-db.com/exploits/27024 · Exploit
• 🔥 http://securitytracker.com/id?1015430 · Exploit
• 🔥 http://osvdb.org/22151 · Exploit
• 🔥 http://ipomonis.com/advisories/PaQFile_Share.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4622 · Nota de Segurança