ID de Prueba:	1.3.6.1.4.1.25623.1.0.103661
Categoría:	Web application abuses
Título:	Polycom Products Directory Traversal and Command Injection Vulnerabilities
Resumen:	Multiple Polycom products are prone to a directory-traversal; vulnerability and a command-injection vulnerability because it fails; to sufficiently sanitize user-supplied input.;; Remote attackers can use a specially crafted request with directory-; traversal sequences ('../') to retrieve arbitrary files in the context; of the application. Also, attackers can execute arbitrary commands; with the privileges of the user running the application.
Descripción:	Summary: Multiple Polycom products are prone to a directory-traversal vulnerability and a command-injection vulnerability because it fails to sufficiently sanitize user-supplied input. Remote attackers can use a specially crafted request with directory- traversal sequences ('../') to retrieve arbitrary files in the context of the application. Also, attackers can execute arbitrary commands with the privileges of the user running the application. Solution: Updates are available. Please see the references for more information. CVSS Score: 9.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:P/A:P
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.