RealPage Module Upload ActiveX Control Multiple Vulnerabilities
BID:44302
Info
RealPage Module Upload ActiveX Control Multiple Vulnerabilities
| Bugtraq ID: | 44302 |
| Class: | Input Validation Error |
| CVE: |
CVE-2010-2584 CVE-2010-2585 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 21 2010 12:00AM |
| Updated: | Oct 21 2010 12:00AM |
| Credit: | Secunia Research |
| Vulnerable: |
RealPage RealPage Module Upload ActiveX Control 1.0.0.9 |
| Not Vulnerable: | |
Discussion
RealPage Module Upload ActiveX Control Multiple Vulnerabilities
RealPage Module Upload ActiveX Control is prone to multiple vulnerabilities.
An attacker can exploit this issue to execute arbitrary code within the context of the application (typically Internet Explorer) that uses the ActiveX control. Failed exploit attempts will result in denial-of-service conditions.
The attacker can exploit the file-upload issue to execute arbitrary code in the context of the webserver.
RealPage Module Upload ActiveX Control 1.0.0.9 is vulnerable; other versions may also be affected.
RealPage Module Upload ActiveX Control is prone to multiple vulnerabilities.
An attacker can exploit this issue to execute arbitrary code within the context of the application (typically Internet Explorer) that uses the ActiveX control. Failed exploit attempts will result in denial-of-service conditions.
The attacker can exploit the file-upload issue to execute arbitrary code in the context of the webserver.
RealPage Module Upload ActiveX Control 1.0.0.9 is vulnerable; other versions may also be affected.
Exploit / POC
RealPage Module Upload ActiveX Control Multiple Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
RealPage Module Upload ActiveX Control Multiple Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
RealPage Module Upload ActiveX Control Multiple Vulnerabilities
References:
References:
- Microsoft Knowledge Base Article 240797 (Microsoft)
- Product Homepage (RealPage)