Etomite Arbitrary Code Execution Vulnerability
BID:16336
Info
Etomite Arbitrary Code Execution Vulnerability
| Bugtraq ID: | 16336 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 20 2006 12:00AM |
| Updated: | Feb 07 2006 08:53PM |
| Credit: | Luca Ercoli is credited with the discovery of this vulnerability. |
| Vulnerable: |
etomite Etomite CMS 0.6 |
| Not Vulnerable: | |
Discussion
Etomite Arbitrary Code Execution Vulnerability
Etomite is prone to a vulnerability that permits the execution of arbitrary code.
An attacker can exploit this issue to execute arbitrary code on the site hosting the affected application in the context of the webserver process.
Etomite is prone to a vulnerability that permits the execution of arbitrary code.
An attacker can exploit this issue to execute arbitrary code on the site hosting the affected application in the context of the webserver process.
Exploit / POC
Etomite Arbitrary Code Execution Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
Etomite Arbitrary Code Execution Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]