PT-2011-4881 · Tadasoft · Tadasoft Restorepoint

Published 2011-12-13 · Updated 2011-12-13 · CVE-2011-4201

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tadasoft Restorepoint version 3.2

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the pid1 or pid2 parameter in a stop remote support action. This is related to the remote support.cgi component.

Recommendations For Tadasoft Restorepoint version 3.2, avoid using the pid1 and pid2 parameters in the stop remote support action until the issue is resolved. As a temporary workaround, consider restricting access to the remote support.cgi component to minimize the risk of exploitation.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2011-4201

Affected Products

Tadasoft Restorepoint

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2011-4201 · Security Note
• https://trustmatta.com/advisories/MATTA-2011-003.txt · Note