PT-2012-3053 · 2X+1 · 2X Applicationserver+2

Published 2012-02-14 · Updated 2017-08-29 · CVE-2012-1065

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions 2X ApplicationServer version 10.1 Build 1224

Description The issue concerns an insecure method vulnerability in the TuxScripting.dll component of the TuxSystem ActiveX control. This vulnerability allows remote attackers to create or overwrite arbitrary files by utilizing the ExportSettings method.

Recommendations For 2X ApplicationServer version 10.1 Build 1224, consider disabling the ExportSettings method in the TuxScripting.dll component as a temporary workaround until a patch is available. Restrict access to the TuxSystem ActiveX control to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2012-1065

Affected Products

2X Applicationserver

Tuxscripting.Dll

Tuxsystem Activex Control

References · 6

• 🔥 https://exploit-db.com/exploits/18625 · Exploit
• http://secunia.com/advisories/47657 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-1065 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/72947 · Note
• http://osvdb.org/78831 · Note
• http://securityfocus.com/bid/51856 · Note