PT-2012-3585 · Dell+1 · Dell Ml6000+1

Publicado 2012-03-22 · Atualizado 2018-01-10 · CVE-2012-1841

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Quantum Scalar i500 tape library versions prior to i7.0.3 (604G.GS00100) Dell ML6000 tape library versions prior to A20-00 (590G.GS00100)

Description The issue allows remote attackers to read arbitrary files via a full pathname in the file parameter of the logShow.htm page.

Recommendations For Quantum Scalar i500 tape library versions prior to i7.0.3 (604G.GS00100), update to version i7.0.3 (604G.GS00100) or later. For Dell ML6000 tape library versions prior to A20-00 (590G.GS00100), update to version A20-00 (590G.GS00100) or later. As a temporary workaround, consider restricting access to the logShow.htm page until a patch is available.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2012-1841

Produtos afetados

Dell Ml6000

Quantum Scalar I500

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2012-1841 · Nota de Segurança
• http://secunia.com/advisories/48403 · Nota
• http://secunia.com/advisories/48453 · Nota
• http://osvdb.org/80226 · Nota
• http://kb.cert.org/vuls/id/MAPG-8NVRPY · Nota
• http://kb.cert.org/vuls/id/913483 · Nota
• http://kb.cert.org/vuls/id/MAPG-8NNKN8 · Nota