PT-2015-3486
CVE-2011-5290
·
Publicado
2015-01-01
·
Atualizado
2015-01-03
Descrição por
CVSS 2.0
6.4
MédiaMétricasAV:N/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
IDrive Online Backup version 3.4.0
Description
The issue concerns the SaveToFile method in the UniBasicPack.UniTextBox ActiveX control, which allows remote attackers to write to arbitrary files by specifying a pathname in the first argument.
Recommendations
For IDrive Online Backup version 3.4.0, consider disabling the SaveToFile method in the UniBasicPack.UniTextBox ActiveX control until a patch is available. Restrict access to this method to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾