PT-2009-3645 · Orbit · Orbit Downloader

Janek Vind + 1 · Publicado 2009-03-24 · Atualizado 2017-09-29 · CVE-2009-1064

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Orbit Downloader versions 2.8.7 and earlier

Description The issue allows remote attackers to overwrite arbitrary files via whitespace and a command-line switch, followed by a full pathname, in the third argument to the download method. This is due to an argument injection vulnerability in the orbitmxt.dll component, version 2.1.0.2.

Recommendations For Orbit Downloader versions 2.8.7 and earlier, consider disabling the download method in the orbitmxt.dll component until a patch is available. Restrict access to the orbitmxt.dll component to minimize the risk of exploitation. Avoid using the third argument in the download method until the issue is resolved.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2009-1064

Produtos afetados

Orbit Downloader

Referências · 5

• 🔥 http://waraxe.us/advisory-73.html · Exploit
• 🔥 https://exploit-db.com/exploits/8257 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49353 · Nota
• http://securityfocus.com/bid/34200 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1064 · Nota de Segurança