PT-2011-2272 · Dell · Dellsystemlite.Ocx

Publicado 2011-02-21 · Atualizado 2011-03-18 · CVE-2011-0329

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions DellSystemLite.ocx version 1.0.0.0

Description The issue allows remote attackers to read arbitrary files via directory traversal sequences in the fileID parameter of the GetData method in the DellSystemLite.Scanner ActiveX control.

Recommendations For DellSystemLite.ocx version 1.0.0.0, avoid using the fileID parameter in the GetData method until the issue is resolved. Consider restricting access to the DellSystemLite.Scanner ActiveX control to minimize the risk of exploitation.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2011-0329

Produtos afetados

Dellsystemlite.Ocx

Referências · 5

• http://securityfocus.com/bid/46443 · Nota
• http://securitytracker.com/id?1025094 · Nota
• http://secunia.com/advisories/42880 · Aviso do Fabricante
• http://secunia.com/secunia_research/2011-10 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-0329 · Nota de Segurança