PT-2010-2377 · Emc · Emc Homebase Server

Stephen Fewer · Publicado 2010-02-23 · Atualizado 2018-10-10 · CVE-2010-0620

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC HomeBase Server versions 6.2.x through 6.2.2 EMC HomeBase Server versions 6.3.x through 6.3.1

Description The issue allows remote attackers to overwrite arbitrary files with any content and consequently execute arbitrary code via a .. (dot dot) in an unspecified parameter. This is due to a directory traversal vulnerability in the SSL Service.

Recommendations For EMC HomeBase Server versions 6.2.x through 6.2.2, update to version 6.2.3 or later. For EMC HomeBase Server versions 6.3.x through 6.3.1, update to version 6.3.2 or later.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2010-0620

ZDI-10-020

Produtos afetados

Emc Homebase Server

Referências · 8

• 🔥 http://securityfocus.com/bid/38380 · Exploit
• 🔥 https://exploit-db.com/exploits/17219 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-0620 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-10-020 · Nota
• https://zerodayinitiative.com/advisories/ZDI-10-020 · Nota de Segurança
• http://securityreason.com/securityalert/8230 · Nota
• http://securityfocus.com/archive/1/509723/100/0/threaded · Nota
• http://vupen.com/english/advisories/2010/0458 · Aviso do Fabricante