PT-2007-5901 · Autodesk · Autodesk Backburner

Publicado 2007-09-14 · Atualizado 2018-10-15 · CVE-2007-4749

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Autodesk Backburner version 3.0.2

Description: The issue allows remote attackers to execute arbitrary commands on render servers by queueing jobs that contain these commands, but only in environments where the administrator has not followed documentation outlining the security risks of operating Backburner on untrusted networks.

Recommendations: For Autodesk Backburner version 3.0.2, consider restricting access to the cmdjob utility to prevent unauthorized job queueing until a patch is available. Additionally, ensure that the administrator follows the documentation that outlines the security risks of operating Backburner on untrusted networks to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2007-4749

Produtos afetados

Autodesk Backburner

Referências · 8

• http://securitytracker.com/id?1018686 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36582 · Nota
• http://securityfocus.com/archive/1/479193/100/0/threaded · Nota
• http://symantec.com/content/en/us/enterprise/research/SYMSA-2007-008.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4749 · Nota de Segurança
• http://securityfocus.com/bid/25590 · Nota
• http://secunia.com/advisories/26797 · Nota
• http://securityreason.com/securityalert/3132 · Nota