PT-2014-4393 · Es · Es File Explorer File Manager

Ryohei Koike · Publicado 2014-03-20 · Atualizado 2014-03-20 · CVE-2014-1970

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions ES File Explorer File Manager version 3.0.3 and earlier

Description A directory traversal issue in the ES File Explorer File Manager application allows remote attackers to overwrite or create arbitrary files.

Recommendations For versions prior to 3.0.4, update to version 3.0.4 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2014-1970

Produtos afetados

Es File Explorer File Manager

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-1970 · Nota de Segurança
• http://jvn.jp/en/jp/JVN70029459/index.html · Nota
• http://jvndb.jvn.jp/jvndb/JVNDB-2014-000033 · Nota