PT-2004-2449
CVE-2004-1541
·
تاريخ النشر
2004-12-31
·
تاريخ التحديث
2017-07-11
الوصف من
CVSS 2.0
7.5
عاليةالمقاييسAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
SecureCRT versions 4.0 through 4.1
Description
The issue allows remote attackers to execute arbitrary commands via a telnet:// URL that uses the /F option to specify a configuration file on a samba share.
Recommendations
For versions 4.0 and 4.1, consider disabling the use of the /F option to specify configuration files from samba shares until a patch is available.
As a temporary workaround, restrict access to configuration files on samba shares to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾