PT-2007-5901 · Autodesk · Autodesk Backburner

Published 2007-09-14 · Updated 2018-10-15 · CVE-2007-4749

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Autodesk Backburner version 3.0.2

Description: The issue allows remote attackers to execute arbitrary commands on render servers by queueing jobs that contain these commands, but only in environments where the administrator has not followed documentation outlining the security risks of operating Backburner on untrusted networks.

Recommendations: For Autodesk Backburner version 3.0.2, consider restricting access to the cmdjob utility to prevent unauthorized job queueing until a patch is available. Additionally, ensure that the administrator follows the documentation that outlines the security risks of operating Backburner on untrusted networks to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2007-4749

Affected Products

Autodesk Backburner

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-4749 · Security Note
• http://securitytracker.com/id?1018686 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36582 · Note
• http://securityfocus.com/archive/1/479193/100/0/threaded · Note
• http://symantec.com/content/en/us/enterprise/research/SYMSA-2007-008.txt · Note
• http://securityfocus.com/bid/25590 · Note
• http://secunia.com/advisories/26797 · Note
• http://securityreason.com/securityalert/3132 · Note