PT-2009-4074 · Shemes · Grabit

Niels Teusink · Publicado 2009-05-07 · Atualizado 2018-10-10 · CVE-2009-1586

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: GrabIt versions 1.7.2 Beta 3 and earlier

Description: The issue is related to a stack-based buffer overflow in the NZB importer feature. This can be exploited by remote attackers through a crafted DTD reference in a DOCTYPE element in an NZB file, allowing them to execute arbitrary code.

Recommendations: For GrabIt versions 1.7.2 Beta 3 and earlier, consider disabling the NZB importer feature until a patch is available to prevent potential exploitation.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-1586

Produtos afetados

Grabit

Referências · 12

• 🔥 https://exploit-db.com/exploits/8637 · Exploit
• 🔥 https://exploit-db.com/exploits/8612 · Exploit
• http://blog.teusink.net/2009/05/grabit-172-beta-3-nzb-file-parsing.html · Nota
• http://securityfocus.com/archive/1/503184/100/0/threaded · Nota
• http://shemes.com/index.php?p=whatsnew · Aviso do Fabricante
• http://securitytracker.com/id?1022161 · Nota
• http://secunia.com/advisories/34893 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/1243 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50310 · Nota
• http://securityfocus.com/bid/34807 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-1586 · Nota de Segurança
• http://osvdb.org/54205 · Nota