PT-2013-1918 · Bigant · Bigant Im Message Server

Hamburgers Maccoy · Published 2013-02-24 · Updated 2013-02-25 · CVE-2012-6273

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BigAnt IM Message Server (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary SQL commands via an SHU (aka search user) request, which is a type of request that can be used to search for users. This can potentially lead to unauthorized access to sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2012-6273

Affected Products

Bigant Im Message Server

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-6273 · Security Note
• http://kb.cert.org/vuls/id/990652 · Note