ISPmanager Remote Code Execution and Unspecified Security Vulnerabilities

Bugtraq ID:	61576
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 02 2013 12:00AM
Updated:	Aug 02 2013 12:00AM
Credit:	Reported by the vendor and Vladislav Roskov from Positive Technologies.
Vulnerable:
Not Vulnerable:

ISPmanager Remote Code Execution and Unspecified Security Vulnerabilities

ISPmanager is prone to a remote code-execution vulnerability and multiple unspecified security vulnerabilities

An attacker can exploit remote code-execution issue to execute arbitrary code and failed exploit attempts may result in a denial-of-service condition; the impact of other issues is unknown.

Versions prior to ISPmanager 4.4.0.16 are vulnerable.

ISPmanager Remote Code Execution and Unspecified Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ISPmanager Remote Code Execution and Unspecified Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

ISPmanager Remote Code Execution and Unspecified Security Vulnerabilities

References: