Adobe Flash Media Server Unspecified RPC Call Privilege Escalation Vulnerability
BID:34790
Info
Adobe Flash Media Server Unspecified RPC Call Privilege Escalation Vulnerability
| Bugtraq ID: | 34790 |
| Class: | Access Validation Error |
| CVE: |
CVE-2009-1365 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 30 2009 12:00AM |
| Updated: | May 01 2009 12:36AM |
| Credit: | The vendor disclosed this issue. |
| Vulnerable: |
Adobe Flash Media Streaming Server 3.5.1 Adobe Flash Media Server 3.5.1 Adobe Flash Media Server 3.0.3 Adobe Flash Media Server 2.0.5 Adobe Flash Media Server 2.0.4 Adobe Flash Media Server 2.0.3 Adobe Flash Media Server 2.0.2 Adobe Flash Media Server 2.0.1 Adobe Flash Media Server 2.0 Adobe Flash Media Server 3.0 Adobe Flash Media Interactive Server 3.5.1 |
| Not Vulnerable: |
Adobe Flash Media Server 3.5.2 Adobe Flash Media Server 3.0.4 |
Discussion
Adobe Flash Media Server Unspecified RPC Call Privilege Escalation Vulnerability
Adobe Flash Media Server is prone to a vulnerability that allows attackers to gain elevated privileges via an unspecified RPC (Remote Procedures Call) issue.
Very few technical details are currently available. We will update this BID as more information emerges.
Versions prior to Flash Media Streaming Server or Flash Media Interactive Server 3.5.2 or 3.0.4 are vulnerable.
Adobe Flash Media Server is prone to a vulnerability that allows attackers to gain elevated privileges via an unspecified RPC (Remote Procedures Call) issue.
Very few technical details are currently available. We will update this BID as more information emerges.
Versions prior to Flash Media Streaming Server or Flash Media Interactive Server 3.5.2 or 3.0.4 are vulnerable.
Exploit / POC
Adobe Flash Media Server Unspecified RPC Call Privilege Escalation Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Adobe Flash Media Server Unspecified RPC Call Privilege Escalation Vulnerability
Solution:
The vendor has released an advisory and updates. Please see the references for details.
Adobe Flash Media Streaming Server 3.5.1
Adobe Flash Media Interactive Server 3.5.1
Adobe Flash Media Server 3.5.1
Solution:
The vendor has released an advisory and updates. Please see the references for details.
Adobe Flash Media Streaming Server 3.5.1
-
Adobe FlashMediaServer3.5.exe
http://download.macromedia.com/pub/flashmediaserver/updates/3_5_2/Wind ows/FlashMediaServer3.5.exe -
Adobe FlashMediaServer3.5.tar.gz
http://download.macromedia.com/pub/flashmediaserver/updates/3_5_2/Linu x/FlashMediaServer3.5.tar.gz
Adobe Flash Media Interactive Server 3.5.1
-
Adobe FlashMediaServer3.5.exe
http://download.macromedia.com/pub/flashmediaserver/updates/3_5_2/Wind ows/FlashMediaServer3.5.exe -
Adobe FlashMediaServer3.5.tar.gz
http://download.macromedia.com/pub/flashmediaserver/updates/3_5_2/Linu x/FlashMediaServer3.5.tar.gz
Adobe Flash Media Server 3.5.1
-
Adobe FlashMediaServer3.5.exe
http://download.macromedia.com/pub/flashmediaserver/updates/3_5_2/Wind ows/FlashMediaServer3.5.exe -
Adobe FlashMediaServer3.5.tar.gz
http://download.macromedia.com/pub/flashmediaserver/updates/3_5_2/Linu x/FlashMediaServer3.5.tar.gz
References
Adobe Flash Media Server Unspecified RPC Call Privilege Escalation Vulnerability
References:
References: