PT-2012-3053 · 2X+1 · 2X Applicationserver+2

Publicado 2012-02-14 · Atualizado 2017-08-29 · CVE-2012-1065

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions 2X ApplicationServer version 10.1 Build 1224

Description The issue concerns an insecure method vulnerability in the TuxScripting.dll component of the TuxSystem ActiveX control. This vulnerability allows remote attackers to create or overwrite arbitrary files by utilizing the ExportSettings method.

Recommendations For 2X ApplicationServer version 10.1 Build 1224, consider disabling the ExportSettings method in the TuxScripting.dll component as a temporary workaround until a patch is available. Restrict access to the TuxSystem ActiveX control to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2012-1065

Produtos afetados

2X Applicationserver

Tuxscripting.Dll

Tuxsystem Activex Control

Referências · 6

• 🔥 https://exploit-db.com/exploits/18625 · Exploit
• http://secunia.com/advisories/47657 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72947 · Nota
• http://osvdb.org/78831 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1065 · Nota de Segurança
• http://securityfocus.com/bid/51856 · Nota