Trend Micro Threat Discovery Appliance 'upload.cgi' Directory Traversal Vulnerability
BID:98400
Info
Trend Micro Threat Discovery Appliance 'upload.cgi' Directory Traversal Vulnerability
| Bugtraq ID: | 98400 |
| Class: | Design Error |
| CVE: |
CVE-2016-8593 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 28 2017 12:00AM |
| Updated: | May 23 2017 04:25PM |
| Credit: | Roberto Suggi Liverani and mr_me |
| Vulnerable: |
Trend Micro Threat Discovery Appliance 2.6.1062r1 |
| Not Vulnerable: | |
Discussion
Trend Micro Threat Discovery Appliance 'upload.cgi' Directory Traversal Vulnerability
Trend Micro Threat Discovery Appliance is prone to a directory-traversal vulnerability.
Remote attackers may use a specially crafted request with directory-traversal sequences ('../') to overwrite arbitrary files to execute arbitrary code. Failed exploit attempts will result in a denial-of-service condition.
Trend Micro Threat Discovery Appliance 2.6.1062r1 and prior are vulnerable.
Trend Micro Threat Discovery Appliance is prone to a directory-traversal vulnerability.
Remote attackers may use a specially crafted request with directory-traversal sequences ('../') to overwrite arbitrary files to execute arbitrary code. Failed exploit attempts will result in a denial-of-service condition.
Trend Micro Threat Discovery Appliance 2.6.1062r1 and prior are vulnerable.
Exploit / POC
Trend Micro Threat Discovery Appliance 'upload.cgi' Directory Traversal Vulnerability
The following proof-of-concept is available:
The following proof-of-concept is available:
Solution / Fix
Trend Micro Threat Discovery Appliance 'upload.cgi' Directory Traversal Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Trend Micro Threat Discovery Appliance 'upload.cgi' Directory Traversal Vulnerability
References:
References:
- Trend Micro Homepage (Trend Micro)