PT-2008-2256 · Afterlogic · Mailbee Objects

Darkl0Rd · Publicado 2008-02-06 · Atualizado 2017-09-29 · CVE-2008-0631

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions MailBee Objects version 5.5

Description The issue concerns Multiple ActiveX controls in MailBee.dll, which allow remote attackers to overwrite arbitrary files via the SaveToDisk method or modify files via the AddStringToFile method.

Recommendations For MailBee Objects version 5.5, consider disabling the SaveToDisk and AddStringToFile methods until a patch is available to prevent remote attackers from overwriting or modifying files.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-0631

Produtos afetados

Mailbee Objects

Referências · 4

• 🔥 http://securityfocus.com/bid/27481 · Exploit
• 🔥 https://exploit-db.com/exploits/4999 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40011 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0631 · Nota de Segurança