Accellion File Transfer Appliance Version Prior to FTA 8.0.562 Multiple Remote Vulnerabilities
BID:46203
Info
Accellion File Transfer Appliance Version Prior to FTA 8.0.562 Multiple Remote Vulnerabilities
| Bugtraq ID: | 46203 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 07 2011 12:00AM |
| Updated: | Mar 14 2011 03:07PM |
| Credit: | HD Moore |
| Vulnerable: |
Accellion File Transfer FTA_7_0_259 Accellion File Transfer FTA_7_0_189 Accellion File Transfer FTA_7_0_178 Accellion File Transfer FTA_7_0_135 Accellion File Transfer 7_0_135 |
| Not Vulnerable: |
Accellion File Transfer 8.0.562 |
Discussion
Accellion File Transfer Appliance Version Prior to FTA 8.0.562 Multiple Remote Vulnerabilities
Accellion File Transfer Appliance is prone to multiple remote vulnerabilities, including:
1. Multiple security-bypass vulnerabilities
2. A remote command-injection vulnerability
3. Multiple privilege-escalation vulnerabilities
An attacker may leverage these issues to execute arbitrary code with elevated privileges or bypass certain security restrictions. Other attacks are also possible.
Versions prior to Accellion File Transfer FTA_8.0.562 are vulnerable.
Accellion File Transfer Appliance is prone to multiple remote vulnerabilities, including:
1. Multiple security-bypass vulnerabilities
2. A remote command-injection vulnerability
3. Multiple privilege-escalation vulnerabilities
An attacker may leverage these issues to execute arbitrary code with elevated privileges or bypass certain security restrictions. Other attacks are also possible.
Versions prior to Accellion File Transfer FTA_8.0.562 are vulnerable.
Exploit / POC
Accellion File Transfer Appliance Version Prior to FTA 8.0.562 Multiple Remote Vulnerabilities
An attacker can use readily available network utilities to exploit these issues.
The following Metasploit exploit module is available:
An attacker can use readily available network utilities to exploit these issues.
The following Metasploit exploit module is available:
Solution / Fix
Accellion File Transfer Appliance Version Prior to FTA 8.0.562 Multiple Remote Vulnerabilities
Solution:
The vendor has released an update. Please contact the vendor for details.
Solution:
The vendor has released an update. Please contact the vendor for details.
References
Accellion File Transfer Appliance Version Prior to FTA 8.0.562 Multiple Remote Vulnerabilities
References:
References:
- R7-0039: Accellion File Transfer Appliance Multiple Vulnerabilities (Rapid7)
- Vendor Homepage (Accellion)