Easewe FTP OCX ActiveX Control 'EaseWeFtp.ocx' Insecure Method Vulnerability

Bugtraq ID:	58622
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 20 2013 12:00AM
Updated:	Mar 20 2013 12:00AM
Credit:	Dr_IDE
Vulnerable:
Not Vulnerable:

Easewe FTP OCX ActiveX Control 'EaseWeFtp.ocx' Insecure Method Vulnerability

Easewe FTP OCX ActiveX control is prone to an insecure-method vulnerability.

Successfully exploiting this issue will allow attackers to create or overwrite arbitrary files on the victim's computer within the context of the affected application (typically Internet Explorer) that uses the ActiveX control.

Easewe FTP ActiveX control 4.6.02 is vulnerable; other versions may also be affected.

Easewe FTP OCX ActiveX Control 'EaseWeFtp.ocx' Insecure Method Vulnerability

To exploit this issue an attacker must entice an unsuspecting user to view a malicious web document.

The following example code is available:

• /data/vulnerabilities/exploits/58622.txt

Easewe FTP OCX ActiveX Control 'EaseWeFtp.ocx' Insecure Method Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Easewe FTP OCX ActiveX Control 'EaseWeFtp.ocx' Insecure Method Vulnerability

References:

• Easewe FTP OCX ActiveX Control (Easewe)