PT-2017-6490 · Fli4L · Fli4L

Felix Eckhofer · Published 2017-08-28 · Updated 2017-09-06 · CVE-2015-1443

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions fli4l versions prior to 3.10.1 fli4l version 4.0 before 2015-01-30

Description The issue allows remote attackers to execute arbitrary code via the httpd package.

Recommendations For fli4l versions prior to 3.10.1, update to version 3.10.1 or later. For fli4l version 4.0 before 2015-01-30, update to a version released on or after 2015-01-30.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2015-1443

Affected Products

Fli4L

References · 4

• http://fli4l.de/fileadmin/fli4l/security/advisory-FFL-1113.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-1443 · Security Note
• http://seclists.org/oss-sec/2015/q1/376 · Note
• http://openwall.com/lists/oss-security/2015/02/01/5 · Note