PT-2008-5939 · Hummingbird · Hummingbird Deployment Wizard

Shinnai · Publicado 2008-10-23 · Atualizado 2024-02-14 · CVE-2008-4728

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hummingbird Deployment Wizard 2008 version 10.0.0.44

Description The issue concerns insecure methods in the DeployRun.DeploymentSetup.1 ActiveX control, allowing remote attackers to execute arbitrary programs via the Run and PerformUpdateAsync methods. Additionally, attackers can modify arbitrary registry values via the SetRegistryValueAsString method, potentially leading to code execution by specifying executable file values to Startup folders.

Recommendations For Hummingbird Deployment Wizard 2008 version 10.0.0.44, consider disabling the Run and PerformUpdateAsync methods, as well as restricting access to the SetRegistryValueAsString method to prevent modification of registry values until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2008-4728

Produtos afetados

Hummingbird Deployment Wizard

Referências · 11

• 🔥 http://shinnai.net/xplits/TXT_L0z0Mimixdsko8kI6VFW.html · Exploit
• 🔥 https://exploit-db.com/exploits/6773 · Exploit
• 🔥 https://exploit-db.com/exploits/6774 · Exploit
• 🔥 https://exploit-db.com/exploits/6776 · Exploit
• 🔥 http://shinnai.net/xplits/TXT_JqLchaIAfq4kSH0NsvJO.html · Exploit
• 🔥 http://shinnai.net/xplits/TXT_2XfQ1sHruhjaoePszNTG.html · Exploit
• http://vupen.com/english/advisories/2008/2857 · Nota
• http://securityfocus.com/bid/31799 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4728 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45961 · Nota
• http://secunia.com/advisories/32337 · Aviso do Fabricante