NeoFiler For Android CVE-2014-0805 Arbitrary File Overwrite Vulnerability
BID:64756
Info
NeoFiler For Android CVE-2014-0805 Arbitrary File Overwrite Vulnerability
| Bugtraq ID: | 64756 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-0805 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 10 2014 12:00AM |
| Updated: | Jan 10 2014 12:00AM |
| Credit: | Ryohei Koike of Sakura Information Systems |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
NeoFiler For Android CVE-2014-0805 Arbitrary File Overwrite Vulnerability
NeoFiler Android is prone to an arbitrary file overwrite vulnerability.
A remote attacker could exploit the vulnerability using directory-traversal characters ('../') to create or overwrite arbitrary files.
The products are vulnerable:
NeoFiler 5.4.3 and prior
NeoFiler Lite 2.4.2 and prior
NeoFiler Android is prone to an arbitrary file overwrite vulnerability.
A remote attacker could exploit the vulnerability using directory-traversal characters ('../') to create or overwrite arbitrary files.
The products are vulnerable:
NeoFiler 5.4.3 and prior
NeoFiler Lite 2.4.2 and prior
Exploit / POC
NeoFiler For Android CVE-2014-0805 Arbitrary File Overwrite Vulnerability
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Currently, we are not aware of any exploits. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution / Fix
NeoFiler For Android CVE-2014-0805 Arbitrary File Overwrite Vulnerability
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.
References
NeoFiler For Android CVE-2014-0805 Arbitrary File Overwrite Vulnerability
References:
References: