Multiple Reamday Enterprises Products Multiple Variable Overwrite Vulnerabilities
BID:16665
Info
Multiple Reamday Enterprises Products Multiple Variable Overwrite Vulnerabilities
| Bugtraq ID: | 16665 |
| Class: | Design Error |
| CVE: |
CVE-2006-0722 CVE-2006-0724 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 15 2006 12:00AM |
| Updated: | Jul 06 2016 02:40PM |
| Credit: | Aliaksandr Hartsuyeu is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Reamday Enterprises Magic News Lite 1.2.3 Reamday Enterprises Magic Downloads 1.1.3 |
| Not Vulnerable: | |
Discussion
Multiple Reamday Enterprises Products Multiple Variable Overwrite Vulnerabilities
Multiple Reamday Enterprises products are prone to multiple vulnerabilities regarding the overwriting of application variables. These issues are due to a failure in the applications to properly initialize various application variables.
An attacker can exploit these issues to overwrite various application variables with attacker-supplied data. Successful exploitation may result in the attacker gaining administrative access to the vulnerable application.
Multiple Reamday Enterprises products are prone to multiple vulnerabilities regarding the overwriting of application variables. These issues are due to a failure in the applications to properly initialize various application variables.
An attacker can exploit these issues to overwrite various application variables with attacker-supplied data. Successful exploitation may result in the attacker gaining administrative access to the vulnerable application.
Exploit / POC
Multiple Reamday Enterprises Products Multiple Variable Overwrite Vulnerabilities
An exploit is not required.
An exploit is not required.
Solution / Fix
Multiple Reamday Enterprises Products Multiple Variable Overwrite Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]
References
Multiple Reamday Enterprises Products Multiple Variable Overwrite Vulnerabilities
References:
References:
- Magic Downloads Homepage (Reamday Enterprises)
- Magic Downloads Unauthorized Data Modification (eVuln)