PT-2010-2377 · Emc · Emc Homebase Server

Stephen Fewer · Published 2010-02-23 · Updated 2018-10-10 · CVE-2010-0620

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions EMC HomeBase Server versions 6.2.x through 6.2.2 EMC HomeBase Server versions 6.3.x through 6.3.1

Description The issue allows remote attackers to overwrite arbitrary files with any content and consequently execute arbitrary code via a .. (dot dot) in an unspecified parameter. This is due to a directory traversal vulnerability in the SSL Service.

Recommendations For EMC HomeBase Server versions 6.2.x through 6.2.2, update to version 6.2.3 or later. For EMC HomeBase Server versions 6.3.x through 6.3.1, update to version 6.3.2 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2010-0620

ZDI-10-020

Affected Products

Emc Homebase Server

References · 8

• 🔥 http://securityfocus.com/bid/38380 · Exploit
• 🔥 https://exploit-db.com/exploits/17219 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-0620 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-10-020 · Security Note
• http://vupen.com/english/advisories/2010/0458 · Vendor Advisory
• http://zerodayinitiative.com/advisories/ZDI-10-020 · Note
• http://securityreason.com/securityalert/8230 · Note
• http://securityfocus.com/archive/1/509723/100/0/threaded · Note