PT-2009-3119 · Synactis · Synactis All In-The-Box Activex

Published 2009-02-06 · Updated 2017-09-29 · CVE-2009-0465

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Synactis ALL In-The-Box ActiveX version 3

Description The issue concerns the SaveDoc method in the All In The Box.AllBox ActiveX control, which allows remote attackers to create and overwrite arbitrary files. This is achieved by providing an argument that ends in a '0' character, effectively bypassing the intended .box filename extension. For example, an argument like 'C:boot.ini0' can be used to exploit this issue.

Recommendations For Synactis ALL In-The-Box ActiveX version 3, consider restricting access to the SaveDoc method in the All In The Box.AllBox ActiveX control until a patch is available. As a temporary workaround, avoid using arguments that end in a '0' character to minimize the risk of exploitation.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2009-0465

Affected Products

Synactis All In-The-Box Activex

References · 7

• 🔥 https://exploit-db.com/exploits/7928 · Exploit
• 🔥 http://securityfocus.com/bid/33535 · Exploit
• http://secunia.com/advisories/33728 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0465 · Security Note
• http://osvdb.org/51693 · Note
• http://vupen.com/english/advisories/2009/0298 · Note
• http://dsecrg.com/pages/vul/show.php?id=62 · Note