PT-2009-5653 · Sap+1 · Sap Crystal Reports Server+1

Publicado 2009-09-24 · Atualizado 2009-09-28 · CVE-2009-3346

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SAP Crystal Reports Server 2008 (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary code. It has been demonstrated by a certain module in VulnDisco Pack Professional versions 8.3 through 8.11. However, as of 20090917, this disclosure has no actionable information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2009-3346

Produtos afetados

Sap Crystal Reports Server

Vulndisco Pack Professional

Referências · 4

• http://securityfocus.com/bid/36267 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3346 · Nota de Segurança
• http://intevydis.com/vd-list.shtml · Nota
• http://secunia.com/advisories/36583 · Aviso do Fabricante