PT-2010-1467 · Xerver · Xerver

Dr_Ide · Publicado 2010-03-03 · Atualizado 2017-09-19 · CVE-2009-4657

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Xerver version 4.32

Description The issue concerns a lack of authentication in the administrator package, allowing remote attackers to modify application settings. This can be achieved by connecting to the application on port 32123. For example, an attacker can set the action option to wizardStep1 to exploit this issue.

Recommendations For Xerver version 4.32, consider restricting access to port 32123 until a fix is available. As a temporary workaround, implement additional authentication mechanisms for the administrator package to prevent unauthorized access.

Exploit

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2009-4657

Produtos afetados

Xerver

Referências · 4

• 🔥 https://exploit-db.com/exploits/9717 · Exploit
• 🔥 http://securityfocus.com/bid/36454 · Exploit
• 🔥 http://exploit-db.com/exploits/9717 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-4657 · Nota de Segurança