PT-2007-4222 · Novell+1 · Novell Extend Director+2

Publicado 2007-06-18 · Atualizado 2017-07-29 · CVE-2007-2923

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell exteNd Director version 4.1 Novell exteNd Portal Services version 4.1

Description The issue allows remote attackers to execute arbitrary commands due to a problem in the launch method of the LocalExec ActiveX control.

Recommendations For Novell exteNd Director version 4.1, consider disabling the LocalExec ActiveX control until a patch is available. For Novell exteNd Portal Services version 4.1, restrict access to the LocalExec ActiveX control to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-2923

Produtos afetados

Localexec Activex Control

Novell Extend Director

Novell Extend Portal Services

Referências · 10

• 🔥 http://securityfocus.com/bid/24493 · Exploit
• http://vupen.com/english/advisories/2007/2235 · Nota
• http://secunia.com/advisories/25710 · Nota
• http://kb.cert.org/vuls/id/793433 · Nota
• http://securitytracker.com/id?1018258 · Nota
• http://osvdb.org/37318 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2923 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34898 · Nota
• http://novell.com/documentation/nedse41/readmesp2.txt · Nota
• https://secure-support.novell.com/KanisaPlatform/Publishing/360/3169416_f.SAL_Public.html · Nota