Ericsson Drutt MSDP CVE-2015-2166 Directory Traversal Vulnerability
BID:73901
Info
Ericsson Drutt MSDP CVE-2015-2166 Directory Traversal Vulnerability
| Bugtraq ID: | 73901 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-2166 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 02 2015 12:00AM |
| Updated: | Apr 02 2015 12:00AM |
| Credit: | Anastasios Monachos |
| Vulnerable: |
Ericsson Drutt MSDP 6 Ericsson Drutt MSDP 5 Ericsson Drutt MSDP 4 |
| Not Vulnerable: | |
Discussion
Ericsson Drutt MSDP CVE-2015-2166 Directory Traversal Vulnerability
Ericsson Drutt MSDP is prone to a directory-traversal vulnerability.
Remote attackers can use specially crafted requests with directory-traversal sequences ('../') to overwrite arbitrary files in the context of the application. This may aid in further attacks.
Ericsson Drutt MSDP is prone to a directory-traversal vulnerability.
Remote attackers can use specially crafted requests with directory-traversal sequences ('../') to overwrite arbitrary files in the context of the application. This may aid in further attacks.
Exploit / POC
Ericsson Drutt MSDP CVE-2015-2166 Directory Traversal Vulnerability
An attacker can exploit this issue using standard commands and readily available tools.
An attacker can exploit this issue using standard commands and readily available tools.
Solution / Fix
Ericsson Drutt MSDP CVE-2015-2166 Directory Traversal Vulnerability
Solution:
Reportedly, the issue is fixed; however, Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reportedly, the issue is fixed; however, Symantec has not confirmed this. Please contact the vendor for more information.
References
Ericsson Drutt MSDP CVE-2015-2166 Directory Traversal Vulnerability
References:
References:
- Ericsson Drutt MSDP - Homepage (Ericsson)