PT-2009-3645 · Orbit · Orbit Downloader

Janek Vind + 1 · Published 2009-03-24 · Updated 2017-09-29 · CVE-2009-1064

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Orbit Downloader versions 2.8.7 and earlier

Description The issue allows remote attackers to overwrite arbitrary files via whitespace and a command-line switch, followed by a full pathname, in the third argument to the download method. This is due to an argument injection vulnerability in the orbitmxt.dll component, version 2.1.0.2.

Recommendations For Orbit Downloader versions 2.8.7 and earlier, consider disabling the download method in the orbitmxt.dll component until a patch is available. Restrict access to the orbitmxt.dll component to minimize the risk of exploitation. Avoid using the third argument in the download method until the issue is resolved.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2009-1064

Affected Products

Orbit Downloader

References · 5

• 🔥 http://waraxe.us/advisory-73.html · Exploit
• 🔥 https://exploit-db.com/exploits/8257 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1064 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49353 · Note
• http://securityfocus.com/bid/34200 · Note