Sawmill Unspecified Remote Privilege Escalation Vulnerability

Bugtraq ID:	13864
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Jun 06 2005 12:00AM
Updated:	Jun 06 2005 12:00AM
Credit:	The individual or individuals responsible for the discovery of this issue are currently unknown; the vendor disclosed this issue.
Vulnerable:	Sawmill Sawmill 7.1.5 Sawmill Sawmill 7.1.4 Sawmill Sawmill 7.1.3 Sawmill Sawmill 7.1.2 Sawmill Sawmill 7.1.1 Sawmill Sawmill 7.1 Sawmill Sawmill 7.0 .x
Not Vulnerable:	Sawmill Sawmill 7.1.7 Sawmill Sawmill 7.1.6

Sawmill Unspecified Remote Privilege Escalation Vulnerability

Sawmill is affected by an unspecified remote privilege escalation vulnerability. This issue is likely due to a failure in the application to properly sanitize user-supplied input.

An attacker may be able to exploit this vulnerability to elevate privileges within the affected system.

The vendor has addressed this issue in Sawmill version 7.1.6 and later; earlier versions are reported vulnerable.

Sawmill Unspecified Remote Privilege Escalation Vulnerability

No exploit is required.

Sawmill Unspecified Remote Privilege Escalation Vulnerability

Solution:
The vendor has address this issue in Sawmill version 7.1.6 and later:


Sawmill Sawmill 7.0 .x

• Sawmill Sawmill 7.1.7
  http://www.sawmill.net/downloads.html

Sawmill Sawmill 7.1

• Sawmill Sawmill 7.1.7
  http://www.sawmill.net/downloads.html

Sawmill Sawmill 7.1.1

• Sawmill Sawmill 7.1.7
  http://www.sawmill.net/downloads.html

Sawmill Sawmill 7.1.2

• Sawmill Sawmill 7.1.7
  http://www.sawmill.net/downloads.html

Sawmill Sawmill 7.1.3

• Sawmill Sawmill 7.1.7
  http://www.sawmill.net/downloads.html

Sawmill Sawmill 7.1.4

• Sawmill Sawmill 7.1.7
  http://www.sawmill.net/downloads.html

Sawmill Sawmill 7.1.5

• Sawmill Sawmill 7.1.7
  http://www.sawmill.net/downloads.html

Sawmill Unspecified Remote Privilege Escalation Vulnerability

References:

• Sawmill Homepage (Sawmill)
  
• Sawmill Version History Version 7 (Sawmill)