Multiple Bare Bones Software Products CVE-2013-3667 Tampering Security Bypass Vulnerability
BID:64603
Info
Multiple Bare Bones Software Products CVE-2013-3667 Tampering Security Bypass Vulnerability
| Bugtraq ID: | 64603 |
| Class: | Design Error |
| CVE: |
CVE-2013-3667 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 31 2013 12:00AM |
| Updated: | Mar 19 2015 09:12AM |
| Credit: | Chris Hickstein |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Multiple Bare Bones Software Products CVE-2013-3667 Tampering Security Bypass Vulnerability
Multiple Bare Bones Software Products are prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions.
Versions prior to Yojimbo 4.0, TextWrangler 4.5.3, and BBEdit 10.5.5 are vulnerable.
Multiple Bare Bones Software Products are prone to a security-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions.
Versions prior to Yojimbo 4.0, TextWrangler 4.5.3, and BBEdit 10.5.5 are vulnerable.
Exploit / POC
Multiple Bare Bones Software Products CVE-2013-3667 Tampering Security Bypass Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
Multiple Bare Bones Software Products CVE-2013-3667 Tampering Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Multiple Bare Bones Software Products CVE-2013-3667 Tampering Security Bypass Vulnerability
References:
References: