Anfälligkeitssuche        Suche in 172616 CVE Beschreibungen
und 81291 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.900159
Kategorie:Denial of Service
Titel:Hummingbird HostExplorer ActiveX Control BOF Vulnerability
Zusammenfassung:This host has Hummingbird HostExplorer ActiveX Control installed; and is prone to stack based buffer overflow vulnerability.
Beschreibung:Summary:
This host has Hummingbird HostExplorer ActiveX Control installed
and is prone to stack based buffer overflow vulnerability.

Vulnerability Insight:
The flaw is due to error in Hummingbird.XWebHostCtrl.1 ActiveX control in
hclxweb.dll file when handling the 'PlainTextPassword' function, which can be exploited by assigning an overly long string.

Vulnerability Impact:
Successful exploitation will allow execution arbitrary code, and deny the
service.

Affected Software/OS:
Hummingbird HostExplorer versions prior to 2008 on Windows (all)

Solution:
Update to HostExplorer 2008.

CVSS Score:
6.8

CVSS Vector:
AV:N/AC:M/Au:N/C:P/I:P/A:P

Querverweis: BugTraq ID: 31783
Common Vulnerability Exposure (CVE) ID: CVE-2008-4729
http://www.securityfocus.com/bid/31783
https://www.exploit-db.com/exploits/6761
http://secunia.com/advisories/32319
http://securityreason.com/securityalert/4505
XForce ISS Database: hummingbird-xweb-activex-hclxweb-bo(45941)
https://exchange.xforce.ibmcloud.com/vulnerabilities/45941
CopyrightCopyright (C) 2008 SecPod

Dies ist nur einer von 81291 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2020 E-Soft Inc. Alle Rechte vorbehalten.