CVE-2009-2265
82Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actepss 84%
de la publicación al arma507 días
Publicada en NVD5 jul
1ª PoC+507d
metasploit3 jul
VulnCheck5 jul
probabilidad de explotación
84%top 1% de las CVE
explotación observada
síVulnCheck
13 exploit(s) público(s)
Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules, as exploited in the wild for remote code execution in July 2009, related to the file browser and the editor/filemanager/connectors/ directory.
Productos afectados
n/a · n/aPoCs públicas encontradas — 13✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16788exploitdbwww.exploit-db.com/exploits/50057no verificadogithubgithub.com/zaphoxx/zaphoxx-coldfusion★ 2githubgithub.com/p1ckzi/CVE-2009-2265★ 1githubgithub.com/h3x0v3rl0rd/CVE-2009-2265★ 1githubgithub.com/0xDTC/Adobe-ColdFusion-8-RCE-CVE-2009-2265★ 1githubgithub.com/nika0x38/CVE-2009-2265★ 0githubgithub.com/matesz44/CVE-2009-2265★ 0vulncheckvulncheck.com/xdb/cef775c3ecfeno verificadocve_referencepacketstormsecurity.com/files/163271/Adobe-ColdFusion-8-Remote-Command-Execution.htmlno verificadovulncheckvulncheck.com/xdb/80b7a130852dno verificadovulncheckvulncheck.com/xdb/be9af909f6f3no verificadovulncheckvulncheck.com/xdb/cbd839ecaccfno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://isc.sans.org/diary.html?storyid=6724http://mail.zope.org/pipermail/zope-dev/2009-July/037195.htmlhttp://packetstormsecurity.com/files/163271/Adobe-ColdFusion-8-Remote-Command-Execution.htmlhttp://secunia.com/advisories/35833http://secunia.com/advisories/35909http://sourceforge.net/project/shownotes.php?release_id=695430https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00710.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-July/msg00750.htmlhttp://www.debian.org/security/2009/dsa-1836http://www.ocert.org/advisories/ocert-2009-007.htmlhttp://www.securityfocus.com/archive/1/504721/100/0/threadedhttp://www.securitytracker.com/id?1022513