H-Sphere SiteStudio Unspecified Vulnerability

Bugtraq ID:	28002
Class:	Unknown
CVE:	CVE-2008-1049
Remote:	Yes
Local:	No
Published:	Feb 26 2008 12:00AM
Updated:	Apr 16 2015 06:05PM
Credit:	The vendor disclosed this issue.
Vulnerable:	Parallels SiteStudio 1.7.1 Parallels SiteStudio 1.7 Parallels H-Sphere 3.0 Patch 8 Parallels H-Sphere 2.5 Patch 10
Not Vulnerable:	Parallels SiteStudio 1.7.2 Parallels SiteStudio 1.8b Parallels H-Sphere 3.0 Patch 9 Parallels H-Sphere 2.5 Patch 11

H-Sphere SiteStudio Unspecified Vulnerability

H-Sphere SiteStudio is prone to an unspecified vulnerability.

Very few technical details are currently available. We will update this BID as more information emerges.

Successful attacks can compromise the application.

Versions prior to H-Sphere SiteStudio 1.8b are affected.

H-Sphere SiteStudio Unspecified Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

H-Sphere SiteStudio Unspecified Vulnerability

Solution:
The vendor released patches to address this issue. Please see the references for more information.

H-Sphere SiteStudio Unspecified Vulnerability

References:

• H-Sphere 2.5 Patch 11 Release Notes (Parallels)
  
• Parallels H-Sphere and Parallels SiteStudio Technical Update (Parallels)
  
• Positive Software Homepage (Parallels)
  
• Updating H-Sphere to 3.0 Patch 9 (Parallels)