PT-2013-4527 · Attachmate · Attachmate Verastream Host Integrator

Arnold Geels · Publicado 2013-11-06 · Atualizado 2013-11-07 · CVE-2013-3626

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Attachmate Verastream Host Integrator versions 6.0 through 7.5 SP 1 HF 1

Description A directory traversal issue in the Session Server allows remote attackers to upload and execute arbitrary files by sending a crafted message.

Recommendations For versions 6.0 through 7.5 SP 1 HF 1, update to a version that contains a fix for this issue to prevent remote attackers from uploading and executing arbitrary files.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2013-3626

Produtos afetados

Attachmate Verastream Host Integrator

Referências · 3

• http://kb.cert.org/vuls/id/436214 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-3626 · Nota de Segurança
• http://support.attachmate.com/techdocs/2700.html · Aviso do Fabricante