PT-2009-2967 · Flexcell · Flexcell Grid Control

Houssamix · Publicado 2009-01-27 · Atualizado 2017-09-29 · CVE-2009-0301

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FlexCell Grid Control version 5.6.9

Description The issue concerns insecure methods in the FlexCell.Grid ActiveX control, allowing remote attackers to create and overwrite arbitrary files. This is achieved through the SaveFile and ExportToXML methods.

Recommendations For FlexCell Grid Control version 5.6.9, consider disabling the SaveFile and ExportToXML methods until a patch is available to prevent the creation and overwriting of arbitrary files.

Exploit

Correção

Identificadores relacionados

CVE-2009-0301

Produtos afetados

Flexcell Grid Control

Referências · 4

• 🔥 https://exploit-db.com/exploits/7868 · Exploit
• 🔥 http://securityfocus.com/bid/33453 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-0301 · Nota de Segurança
• http://secunia.com/advisories/33664 · Aviso do Fabricante