PT-2011-5015 · Apache+1 · Apache Http Server+1

Publicado 2011-12-02 · Atualizado 2017-08-29 · CVE-2011-4668

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Tivoli Netcool/Reporter version 2.2 before 2.2.0.8

Description The issue allows remote attackers to execute arbitrary code via vectors related to an unspecified CGI program used with the Apache HTTP Server.

Recommendations For IBM Tivoli Netcool/Reporter version 2.2 before 2.2.0.8, update to version 2.2.0.8 or later to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2011-4668

Produtos afetados

Apache Http Server

Ibm Tivoli Netcool/Reporter

Referências · 7

• http://securityfocus.com/bid/50864 · Nota
• http://ibm.com/support/docview.wss?uid=swg1IZ94277 · Aviso do Fabricante
• http://secunia.com/advisories/46999 · Nota
• http://osvdb.org/77402 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71663 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg24031456 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-4668 · Nota de Segurança