PT-2009-2967 · Flexcell · Flexcell Grid Control

Houssamix · Published 2009-01-27 · Updated 2017-09-29 · CVE-2009-0301

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FlexCell Grid Control version 5.6.9

Description The issue concerns insecure methods in the FlexCell.Grid ActiveX control, allowing remote attackers to create and overwrite arbitrary files. This is achieved through the SaveFile and ExportToXML methods.

Recommendations For FlexCell Grid Control version 5.6.9, consider disabling the SaveFile and ExportToXML methods until a patch is available to prevent the creation and overwriting of arbitrary files.

Exploit

Fix

Related Identifiers

CVE-2009-0301

Affected Products

Flexcell Grid Control

References · 4

• 🔥 https://exploit-db.com/exploits/7868 · Exploit
• 🔥 http://securityfocus.com/bid/33453 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-0301 · Security Note
• http://secunia.com/advisories/33664 · Vendor Advisory