SmarterMail '\App_Data\Temp' Directory Arbitrary Shell Upload Vulnerability
BID:65251
Info
SmarterMail '\App_Data\Temp' Directory Arbitrary Shell Upload Vulnerability
| Bugtraq ID: | 65251 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 28 2014 12:00AM |
| Updated: | Jan 28 2014 12:00AM |
| Credit: | Securatary |
| Vulnerable: |
SmarterTools SmarterMail 11.7.5136 |
| Not Vulnerable: | |
Discussion
SmarterMail '\App_Data\Temp' Directory Arbitrary Shell Upload Vulnerability
SmarterMail is prone to an arbitrary shell-upload vulnerability.
An attacker may leverage this issue to upload arbitrary shells to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.
SmarterMail 11.7.5136 is vulnerable; other versions may also be affected.
SmarterMail is prone to an arbitrary shell-upload vulnerability.
An attacker may leverage this issue to upload arbitrary shells to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application.
SmarterMail 11.7.5136 is vulnerable; other versions may also be affected.
Exploit / POC
SmarterMail '\App_Data\Temp' Directory Arbitrary Shell Upload Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
SmarterMail '\App_Data\Temp' Directory Arbitrary Shell Upload Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
SmarterMail '\App_Data\Temp' Directory Arbitrary Shell Upload Vulnerability
References:
References:
- How to protect Smartermail from Remote Shell Vulnerability (SmarterTools)
- SmarterMail Product Page (SmarterTools)
- SmarterMail Take Over (Securatary)
- Vulnerabilities within Mura CMS / Sitecore MCS / SmarterMail (Securatary)