critical9.4Public exploit code
CVE-2013-2068
Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow remote attackers to create and overwrite …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RedHat CloudForms Management Engine 5.1 - agent/linuxpkgs Directory Traversal (Metasploit)2013-12-24 · remote · linux · Verified
Impact
Multiple directory traversal vulnerabilities in the AgentController in Red Hat CloudForms Management Engine 2.0 allow remote attackers to create and overwrite arbitrary files via a .. (dot dot) in the filename parameter to the (1) log, (2) upload, or (3) linuxpkgs method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redhat | Cloudforms Management Engine | Version 5.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://rhn.redhat.com/errata/RHSA-2013-1206.html
- http://www.exploit-db.com/exploits/30469
- https://bugzilla.redhat.com/show_bug.cgi?id=960422
- http://rhn.redhat.com/errata/RHSA-2013-1206.html
- http://www.exploit-db.com/exploits/30469
- https://bugzilla.redhat.com/show_bug.cgi?id=960422