Easewe FTP OCX ActiveX Control 'EaseWeFtp.ocx' Multiple Insecure Method Vulnerabilities

Bugtraq ID:	48393
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 22 2011 12:00AM
Updated:	Aug 08 2012 07:32PM
Credit:	High-Tech Bridge SA
Vulnerable:	Easewe FTP OCX ActiveX Control 4.5.0.9
Not Vulnerable:

Easewe FTP OCX ActiveX Control 'EaseWeFtp.ocx' Multiple Insecure Method Vulnerabilities

Easewe FTP OCX ActiveX control is prone to multiple insecure-method vulnerabilities.

Attackers can exploit these issues to perform unauthorized actions or execute arbitrary programs. Successful exploits may result in compromise of affected computers.

Easewe FTP OCX ActiveX control 4.5.0.9 is vulnerable; other versions may also be affected.

Easewe FTP OCX ActiveX Control 'EaseWeFtp.ocx' Multiple Insecure Method Vulnerabilities

To exploit these issues, an attacker must entice an unsuspecting user to view a malicious web document.

The following example codes are available:

• /data/vulnerabilities/exploits/48393.txt
• /data/vulnerabilities/exploits/48393.html.txt

Easewe FTP OCX ActiveX Control 'EaseWeFtp.ocx' Multiple Insecure Method Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Easewe FTP OCX ActiveX Control 'EaseWeFtp.ocx' Multiple Insecure Method Vulnerabilities

References:

• Easewe FTP OCX ActiveX Control (Easewe)
  
• HTB23015: Easewe FTP ActiveX Control Multiple Insecure Methods (High-Tech Bridge SA)
  
• HTB23015: Easewe FTP ActiveX Control Multiple Insecure Methods (High-Tech Bridge SA)