PT-2006-7199
CVE-2006-6597
·
Publicado
2006-12-15
·
Atualizado
2024-02-13
Descrição por
CVSS 2.0
6.8
MédiaMétricasAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
HyperAccess version 8.4
Description
The issue allows user-assisted remote attackers to execute arbitrary vbscript and commands. This is achieved via the /r option in a telnet:// URI, which is configured to use hawin32.exe.
Recommendations
For HyperAccess version 8.4, consider disabling the use of the /r option in telnet:// URIs to minimize the risk of exploitation until a patch is available. Restrict access to hawin32.exe to prevent unauthorized execution of commands.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾