BitTorrent Sync CVE-2015-2846 Remote Code Execution Vulnerability
BID:73906
Info
BitTorrent Sync CVE-2015-2846 Remote Code Execution Vulnerability
| Bugtraq ID: | 73906 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-2846 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 03 2015 12:00AM |
| Updated: | Apr 03 2015 12:00AM |
| Credit: | Andrea Micalizzi (rgod) |
| Vulnerable: |
BitTorrent Sync 0 |
| Not Vulnerable: | |
Discussion
BitTorrent Sync CVE-2015-2846 Remote Code Execution Vulnerability
BitTorrent Sync is prone to a remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will result in a denial-of-service condition.
BitTorrent Sync is prone to a remote code-execution vulnerability.
An attacker can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will result in a denial-of-service condition.
Exploit / POC
BitTorrent Sync CVE-2015-2846 Remote Code Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution / Fix
BitTorrent Sync CVE-2015-2846 Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
BitTorrent Sync CVE-2015-2846 Remote Code Execution Vulnerability
References:
References:
- Sync Home Page (BitTorrent)
- BitTorrent Sync btsync: Protocol Command Injection Remote Code Execution Vulnera (Zero Day Initiative)