PT-2012-2414 · 7 Technologies · Termius

Publicado 2012-02-22 · Atualizado 2012-02-22 · CVE-2012-0223

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions 7-Technologies (7T) TERMIS versions 2.10 and earlier

Description The issue is related to an untrusted search path vulnerability, which allows local users to gain privileges. This can be achieved by placing a Trojan horse DLL in the current working directory.

Recommendations For versions 2.10 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2012-0223

Produtos afetados

Termius

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-0223 · Nota de Segurança
• http://us-cert.gov/control_systems/pdf/ICSA-12-025-02A.pdf · Correção