PT-2013-5736 · Watchguard · Watchguard Server Center+2

Julien Ahrens · Publicado 2013-10-03 · Atualizado 2013-10-07 · CVE-2013-5701

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions WatchGuard Server Center versions 11.7.3 through 11.7.4

Description The issue allows local users to gain privileges via a Trojan horse wgpr.dll file in the application's bin directory. This is due to multiple untrusted search path vulnerabilities in Watchguard Log Collector and Watchguard WebBlocker Server.

Recommendations For WatchGuard Server Center versions 11.7.3 through 11.7.4, consider removing or restricting access to the wgpr.dll file in the application's bin directory as a temporary mitigation measure. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2013-5701

Produtos afetados

Watchguard Server Center

Watchguard Log Collector

Watchguard Webblocker Server

Referências · 5

• 🔥 https://exploit-db.com/exploits/38752 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2013/Sep/43 · Exploit
• 🔥 https://rcesecurity.com/2013/09/cve-2013-5701-watchguard-server-center-v11-7-4-wgpr-dll-local-privileges-escalation-vulnerability · Exploit
• 🔥 http://securitytracker.com/id/1028992 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-5701 · Nota de Segurança