CVE-2008-4728

Опубликовано: 24 окт. 2008

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the (1) Run and (2) PerformUpdateAsync methods, and (3) modify arbitrary registry values via the SetRegistryValueAsString method. NOTE: the SetRegistryValueAsString method could be leveraged for code execution by specifying executable file values to Startup folders.

Ссылки

http://secunia.com/advisories/32337
Vendor Advisory
http://www.securityfocus.com/bid/31799
http://www.shinnai.net/xplits/TXT_2XfQ1sHruhjaoePszNTG.html
Exploit
URL Repurposed
http://www.shinnai.net/xplits/TXT_JqLchaIAfq4kSH0NsvJO.html
Exploit
URL Repurposed
http://www.shinnai.net/xplits/TXT_L0z0Mimixdsko8kI6VFW.html
Exploit
URL Repurposed
http://www.vupen.com/english/advisories/2008/2857
https://exchange.xforce.ibmcloud.com/vulnerabilities/45961
https://www.exploit-db.com/exploits/6773
https://www.exploit-db.com/exploits/6774
https://www.exploit-db.com/exploits/6776
http://secunia.com/advisories/32337
Vendor Advisory
http://www.securityfocus.com/bid/31799
http://www.shinnai.net/xplits/TXT_2XfQ1sHruhjaoePszNTG.html
Exploit
URL Repurposed
http://www.shinnai.net/xplits/TXT_JqLchaIAfq4kSH0NsvJO.html
Exploit
URL Repurposed
http://www.shinnai.net/xplits/TXT_L0z0Mimixdsko8kI6VFW.html
Exploit
URL Repurposed
http://www.vupen.com/english/advisories/2008/2857
https://exchange.xforce.ibmcloud.com/vulnerabilities/45961
https://www.exploit-db.com/exploits/6773
https://www.exploit-db.com/exploits/6774
https://www.exploit-db.com/exploits/6776

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:hummingbird:deployment_wizard:2008:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.30123

Средний

9.3 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-4m34-xhpq-w89v

github

больше 3 лет назад