Multiple SKYARC System Products Unspecified Security Bypass Vulnerability

Bugtraq ID:	50448
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 31 2011 12:00AM
Updated:	Mar 19 2015 09:06AM
Credit:	Masako Ohno
Vulnerable:	SKYARC System MultipleFileUploader 0.44 SKYARC System MTCMS Smart 5.251 SKYARC System MTCMS Enterprise 5.251 SKYARC System MTCMS 5.251 SKYARC System DuplicateEntry 1.2 SKYARC System AutoTagging 0.08
Not Vulnerable:	SKYARC System MTCMS 5.252

Multiple SKYARC System Products Unspecified Security Bypass Vulnerability

Multiple SKYARC System products are prone to an unspecified security-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions.

The following products are affected:

MTCMS version 5.251 and earlier
MTCMS Enterprise version 5.251 and earlier
MTCMS Smart version 5.251 and earlier
MultiFileUploader version 0.44 and earlier
DuplicateEntry version 1.2 and earlier
MailPack version 1.741 and earlier
AutoTagging version 0.08 and earlier

Multiple SKYARC System Products Unspecified Security Bypass Vulnerability

Currently we are not aware of any exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple SKYARC System Products Unspecified Security Bypass Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Multiple SKYARC System Products Unspecified Security Bypass Vulnerability

References:

• JVN#41032068 (JVN)
  
• Vendor Hompage (SKYARC System)