PT-2007-3039 · Datarescue · Datarescue Ida Pro

Publicado 2007-03-24 · Atualizado 2017-07-29 · CVE-2007-1666

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: DataRescue IDA Pro versions 5.0 through 5.1

Description: The issue concerns the processor request function in the debugger server, which fails to verify authentication before invoking the perform request function. This allows remote attackers to perform unauthorized actions.

Recommendations: For DataRescue IDA Pro versions 5.0 through 5.1, consider disabling the processor request function until a patch is available to prevent unauthorized actions. Restrict access to the debugger server to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-1666

Produtos afetados

Datarescue Ida Pro

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-1666 · Nota de Segurança
• http://labs.idefense.com/intelligence/vulnerabilities · Nota
• http://securitytracker.com/id?1017815 · Nota
• http://datarescue.com/freefiles/ida_remdeb_fix_22032007.zip · Correção
• http://osvdb.org/33523 · Nota
• http://secunia.com/advisories/24635 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33190 · Nota
• http://securityfocus.com/bid/23114 · Nota
• http://vupen.com/english/advisories/2007/1089 · Aviso do Fabricante