Cogent DataHub Unspecified Arbitrary File Overwrite and Denial Of Service Vulnerabilities
BID:62613
Info
Cogent DataHub Unspecified Arbitrary File Overwrite and Denial Of Service Vulnerabilities
| Bugtraq ID: | 62613 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 30 2013 12:00AM |
| Updated: | Aug 30 2013 12:00AM |
| Credit: | Evgeny Legerov of Intevydis and Vendor |
| Vulnerable: |
Cogentdatahub Cogent DataHub 7.3.2 Cogentdatahub Cogent DataHub 7.3 |
| Not Vulnerable: |
Cogentdatahub Cogent DataHub 7.3.3 |
Discussion
Cogent DataHub Unspecified Arbitrary File Overwrite and Denial Of Service Vulnerabilities
Cogent DataHub is prone to an unspecified arbitrary-file-overwrite vulnerability and multiple unspecified denial-of-service vulnerabilities.
Attackers can leverage these issues to overwrite arbitrary files on the victim's computer in the context of the vulnerable application, crash the application that uses the affected library, denying service to legitimate users.
Limited information is currently available regarding this issue. We will update this BID as more information emerges.
Versions prior to Cogent DataHub 7.3.3 are vulnerable.
Cogent DataHub is prone to an unspecified arbitrary-file-overwrite vulnerability and multiple unspecified denial-of-service vulnerabilities.
Attackers can leverage these issues to overwrite arbitrary files on the victim's computer in the context of the vulnerable application, crash the application that uses the affected library, denying service to legitimate users.
Limited information is currently available regarding this issue. We will update this BID as more information emerges.
Versions prior to Cogent DataHub 7.3.3 are vulnerable.
Exploit / POC
Cogent DataHub Unspecified Arbitrary File Overwrite and Denial Of Service Vulnerabilities
Exploit modules are available in VulnDisco exploit pack for unspecified arbitrary file overwrite and denial-of-service issues.
Exploit modules are available in VulnDisco exploit pack for unspecified arbitrary file overwrite and denial-of-service issues.
Solution / Fix
Cogent DataHub Unspecified Arbitrary File Overwrite and Denial Of Service Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cogent DataHub Unspecified Arbitrary File Overwrite and Denial Of Service Vulnerabilities
References:
References:
- [Canvas] VulnDisco Pack Professional 10.0 (Immunity Inc)
- Cogent DataHub Homepage (Cogent Real-Time Systems)
- Cogent DataHub Release Notes (Cogent)