메뉴 건너뛰기

GREATUSER

cve

CVE-2017-16593

관리자 2018.01.25 04:00 조회 수 : 29

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the org.apache.jsp.u.jsp.restore.del_005fdo_jsp servlet, which listens on TCP port 8081 by default. When parsing the filenames parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to delete any files accessible to the Administrator user. Was ZDI-CAN-5104.


원문출처 : https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-16593
번호 제목 글쓴이 날짜 조회 수
467 CVE-2017-16661 관리자 2017.11.09 12
466 CVE-2017-16659 관리자 2017.11.09 12
465 CVE-2017-14100 관리자 2017.09.04 12
464 CVE-2017-15094 관리자 2018.01.25 11
463 CVE-2018-1000014 관리자 2018.01.25 11
462 CVE-2018-1000011 관리자 2018.01.25 11
461 CVE-2017-16610 관리자 2018.01.25 11
460 CVE-2017-16606 관리자 2018.01.25 11
459 CVE-2018-6001 관리자 2018.01.25 11
458 CVE-2018-1044 관리자 2018.01.25 11
457 CVE-2018-1042 관리자 2018.01.25 11
456 CVE-2017-16660 관리자 2017.11.09 11
455 CVE-2017-16650 관리자 2017.11.09 11
454 CVE-2017-9805 관리자 2017.09.16 11
453 CVE-2017-9506 관리자 2017.08.27 11
위로