PT-2015-3937 · Comodo · Comodo Geekbuddy

Jeremy Brown · Publicado 2015-06-09 · Atualizado 2016-12-06 · CVE-2014-7872

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Comodo GeekBuddy versions prior to 4.18.121

Description The issue allows local users to gain privileges by connecting to the VNC server due to a lack of access restriction.

Recommendations For Comodo GeekBuddy versions prior to 4.18.121, update to version 4.18.121 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-7872

Produtos afetados

Comodo Geekbuddy

Referências · 4

• 🔥 https://exploit-db.com/exploits/37065 · Exploit
• http://packetstormsecurity.com/files/135841/Comodo-Internet-Security-VNC-Server-Exposure.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-7872 · Nota de Segurança
• http://osvdb.org/122355 · Nota