Multiple IBM products CVE-2013-2982 Arbitrary File Upload Vulnerability

Bugtraq ID:	60987
Class:	Input Validation Error
CVE:	CVE-2013-2982
Remote:	Yes
Local:	No
Published:	Jul 01 2013 12:00AM
Updated:	Jul 01 2013 12:00AM
Credit:	IBM
Vulnerable:	IBM Sterling File Gateway 2.2 IBM Sterling File Gateway 2.1 IBM Sterling B2B Integrator 5.2 IBM Sterling B2B Integrator 5.1
Not Vulnerable:

Multiple IBM products CVE-2013-2982 Arbitrary File Upload Vulnerability

Multiple IBM product are prone to an arbitrary file-upload vulnerability.

An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.

The following product versions are vulnerable:

IBM Sterling B2B Integrator 5.2 and 5.1
IBM Sterling File Gateway 2.2 and 2.1

Multiple IBM products CVE-2013-2982 Arbitrary File Upload Vulnerability

An attacker can exploit this issue using a web browser.

Multiple IBM products CVE-2013-2982 Arbitrary File Upload Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple IBM products CVE-2013-2982 Arbitrary File Upload Vulnerability

References:

• IBM Sterling B2B Integrator Homepage (IBM)
  
• IBM Sterling File Gateway Homepage (IBM )
  
• Security Bulletin: Vulnerabilities in IBM Sterling B2B Integrator and IBM Sterli (IBM)