PT-2017-6490 · Fli4L · Fli4L

Felix Eckhofer · Publicado 2017-08-28 · Atualizado 2017-09-06 · CVE-2015-1443

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions fli4l versions prior to 3.10.1 fli4l version 4.0 before 2015-01-30

Description The issue allows remote attackers to execute arbitrary code via the httpd package.

Recommendations For fli4l versions prior to 3.10.1, update to version 3.10.1 or later. For fli4l version 4.0 before 2015-01-30, update to a version released on or after 2015-01-30.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2015-1443

Produtos afetados

Fli4L

Referências · 4

• http://seclists.org/oss-sec/2015/q1/376 · Nota
• http://fli4l.de/fileadmin/fli4l/security/advisory-FFL-1113.txt · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2015/02/01/5 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1443 · Nota de Segurança