RETIRED: RadASM '.rap' Project File Command Execution Vulnerability

Bugtraq ID:	32687
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 08 2008 12:00AM
Updated:	Dec 08 2008 11:31PM
Credit:	DATA_SNIPER
Vulnerable:	Ketil O RadASM 2.2.1 5 Ketil O RadASM 2.2.1 4
Not Vulnerable:

RETIRED: RadASM '.rap' Project File Command Execution Vulnerability

RadASM is prone to a command-execution vulnerability because it fails to perform adequate checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary commands in the context of the application. This may aid in further attacks.

RadASM 2.2.1.5 is vulnerable; other versions may also be affected.

NOTE: This BID is being retired because it has been determined not to be a vulnerability.

RETIRED: RadASM '.rap' Project File Command Execution Vulnerability

Attackers may use commonly available tools to exploit this issue.

RETIRED: RadASM '.rap' Project File Command Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

RETIRED: RadASM '.rap' Project File Command Execution Vulnerability

References:

• RadASM Homepage (Ketil O)
  
• RadAsm <=2.2.1.5 Local Command Execution ([email protected])
  
• Re: RadAsm <=2.2.1.5 Local Command Execution ("Li Gen" )