Multiple Vendor ActiveX Control Vulnerabilities

Bugtraq ID:	8091
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 03 2003 12:00AM
Updated:	Jul 03 2003 12:00AM
Credit:	Discovery of these issues credited to Richard M. Smith [email protected].
Vulnerable:	SupportSoft TgLib.System RhinoSoft FtpTree /n software IPWorks.TFTP
Not Vulnerable:

Multiple Vendor ActiveX Control Vulnerabilities

Several ActiveX controls provided by software manufacturers have been reported to be prone to issues that may result in the compromise of a system.

The precise technical details of these vulnerabilities are currenly unknown. This BID will be updated as further information becomes available.

Multiple Vendor ActiveX Control Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Multiple Vendor ActiveX Control Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Multiple Vendor ActiveX Control Vulnerabilities

References:

• /n software (/n software)
  
• FTP Voyager Product Page (RhinoSoft)
  
• Software vendors just don't "get" ActiveX security (Richard M. Smith [email protected])
  
• SupportSoft (SupportSoft)