PT-2011-4881 · Tadasoft · Tadasoft Restorepoint

Publicado 2011-12-13 · Atualizado 2011-12-13 · CVE-2011-4201

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tadasoft Restorepoint version 3.2

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the pid1 or pid2 parameter in a stop remote support action. This is related to the remote support.cgi component.

Recommendations For Tadasoft Restorepoint version 3.2, avoid using the pid1 and pid2 parameters in the stop remote support action until the issue is resolved. As a temporary workaround, consider restricting access to the remote support.cgi component to minimize the risk of exploitation.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2011-4201

Produtos afetados

Tadasoft Restorepoint

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2011-4201 · Nota de Segurança
• https://trustmatta.com/advisories/MATTA-2011-003.txt · Nota