PT-2008-5939 · Hummingbird · Hummingbird Deployment Wizard

Shinnai · Published 2008-10-23 · Updated 2024-02-14 · CVE-2008-4728

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hummingbird Deployment Wizard 2008 version 10.0.0.44

Description The issue concerns insecure methods in the DeployRun.DeploymentSetup.1 ActiveX control, allowing remote attackers to execute arbitrary programs via the Run and PerformUpdateAsync methods. Additionally, attackers can modify arbitrary registry values via the SetRegistryValueAsString method, potentially leading to code execution by specifying executable file values to Startup folders.

Recommendations For Hummingbird Deployment Wizard 2008 version 10.0.0.44, consider disabling the Run and PerformUpdateAsync methods, as well as restricting access to the SetRegistryValueAsString method to prevent modification of registry values until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2008-4728

Affected Products

Hummingbird Deployment Wizard

References · 11

• 🔥 http://shinnai.net/xplits/TXT_L0z0Mimixdsko8kI6VFW.html · Exploit
• 🔥 https://exploit-db.com/exploits/6773 · Exploit
• 🔥 https://exploit-db.com/exploits/6774 · Exploit
• 🔥 https://exploit-db.com/exploits/6776 · Exploit
• 🔥 http://shinnai.net/xplits/TXT_JqLchaIAfq4kSH0NsvJO.html · Exploit
• 🔥 http://shinnai.net/xplits/TXT_2XfQ1sHruhjaoePszNTG.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4728 · Security Note
• http://secunia.com/advisories/32337 · Vendor Advisory
• http://vupen.com/english/advisories/2008/2857 · Note
• http://securityfocus.com/bid/31799 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45961 · Note