medium5.0Public exploit code
CVE-2012-6274
BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BigAnt Server 2.97 - DUPF Command Arbitrary File Upload (Metasploit)2013-02-20 · remote · windows · Verified
Impact
BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bigantsoft | Bigant Im Message Server | All versions |