Livetecs Timelive CVE-2014-2042 Arbitrary File Upload Vulnerability
BID:67044
Info
Livetecs Timelive CVE-2014-2042 Arbitrary File Upload Vulnerability
| Bugtraq ID: | 67044 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-2042 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 17 2014 12:00AM |
| Updated: | Apr 17 2014 12:00AM |
| Credit: | Richard Hatch |
| Vulnerable: |
Livetecs Timelive 6.2.71 |
| Not Vulnerable: |
Livetecs Timelive 6.5.1 |
Discussion
Livetecs Timelive CVE-2014-2042 Arbitrary File Upload Vulnerability
Livetecs Timelive is prone to a vulnerability that lets attackers upload arbitrary files.
An attacker can exploit this issue to upload arbitrary code and run it in the context of the web server process; other attacks are also possible.
Livetecs Timelive 6.2.71 is vulnerable; other versions may also be affected.
Livetecs Timelive is prone to a vulnerability that lets attackers upload arbitrary files.
An attacker can exploit this issue to upload arbitrary code and run it in the context of the web server process; other attacks are also possible.
Livetecs Timelive 6.2.71 is vulnerable; other versions may also be affected.
Exploit / POC
Livetecs Timelive CVE-2014-2042 Arbitrary File Upload Vulnerability
Attackers can exploit this issue through a browser.
Attackers can exploit this issue through a browser.
Solution / Fix
Livetecs Timelive CVE-2014-2042 Arbitrary File Upload Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.