Security File Manager For Android CVE-2014-0804 Arbitrary File Overwrite Vulnerability
BID:64755
Info
Security File Manager For Android CVE-2014-0804 Arbitrary File Overwrite Vulnerability
| Bugtraq ID: | 64755 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-0804 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 10 2014 12:00AM |
| Updated: | Jan 10 2014 12:00AM |
| Credit: | Ryohei Koike of Sakura Information Systems |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Security File Manager For Android CVE-2014-0804 Arbitrary File Overwrite Vulnerability
Security File Manager Android is prone to an arbitrary file overwrite vulnerability.
A remote attacker could exploit the vulnerability using directory-traversal characters ('../') to create or overwrite arbitrary files.
Security File Manager Pro 1.0.6 and prior are vulnerable.
Security File Manager Android is prone to an arbitrary file overwrite vulnerability.
A remote attacker could exploit the vulnerability using directory-traversal characters ('../') to create or overwrite arbitrary files.
Security File Manager Pro 1.0.6 and prior are vulnerable.
Exploit / POC
Security File Manager For Android CVE-2014-0804 Arbitrary File Overwrite Vulnerability
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution / Fix
Security File Manager For Android CVE-2014-0804 Arbitrary File Overwrite Vulnerability
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
References
Security File Manager For Android CVE-2014-0804 Arbitrary File Overwrite Vulnerability
References:
References: