ContentKeeper Versions 125.09 and Prior Multiple Remote Vulnerabilites

Bugtraq ID:	34354
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Apr 02 2009 12:00AM
Updated:	Apr 03 2009 09:46PM
Credit:	Patrick Webster
Vulnerable:	ContentKeeper Technologies ContentKeeper 125.09 ContentKeeper Technologies ContentKeeper 123.25
Not Vulnerable:	ContentKeeper Technologies ContentKeper 125.10

ContentKeeper Versions 125.09 and Prior Multiple Remote Vulnerabilites

ContentKeeper is prone to multiple remote vulnerabilities:

- An unauthorized-access vulnerability
- An arbitrary-file-overwrite vulnerability
- A remote command-execution vulnerability
- A remote privilege-escalation vulnerability

Attackers can exploit these issues to gain unauthorized access to certain binaries, overwrite arbitrary files, execute arbitrary commands, and gain elevated access to the affected computer.

ContentKeeper 125.09 and earlier are vulnerable.

ContentKeeper Versions 125.09 and Prior Multiple Remote Vulnerabilites

Attackers can exploit these issues through a browser.

ContentKeeper Versions 125.09 and Prior Multiple Remote Vulnerabilites

Solution:
An update is available to address these issues. Please see the references for more information.

ContentKeeper Versions 125.09 and Prior Multiple Remote Vulnerabilites

References:

• ContentKeeper Homepage (ContentKeeper)
  
• ContentKeeper - Remote command execution and privilege escalation (Patrick Webster )