PT-2007-7073 · Ispmanager · Ispmanager

Publicado 2007-11-30 · Atualizado 2017-07-29 · CVE-2007-6182

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ISPmanager version 4.2.15.1

Description The issue allows local users to gain privileges via shell metacharacters in command line arguments. This is related to the responder program in ISPmanager.

Recommendations For version 4.2.15.1, consider restricting access to the responder program until a patch is available. As a temporary workaround, avoid using shell metacharacters in command line arguments to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-6182

Produtos afetados

Ispmanager

Referências · 8

• 🔥 http://fortconsult.net/images/pdf/advisories/ispmgr_nov2007.pdf · Exploit
• 🔥 https://exploit-db.com/exploits/30780 · Exploit
• http://ispsystem.com/en/support/changelog/ispmgr.html?all=yes · Nota
• http://secunia.com/advisories/27585 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38564 · Nota
• http://securityfocus.com/bid/26503 · Nota
• http://osvdb.org/42337 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6182 · Nota de Segurança