ID de Prueba:	1.3.6.1.4.1.25623.1.0.103781
Categoría:	Web application abuses
Título:	Sophos Web Protection Appliance Multiple Vulnerabilities (Jul 2013) - Active Check
Resumen:	Sophos Web Protection Appliance is prone to multiple; vulnerabilities.
Descripción:	Summary: Sophos Web Protection Appliance is prone to multiple vulnerabilities. Vulnerability Insight: Sophos Web Protection Appliance is prone to a pre-authentication OS command injection vulnerability and to a privilege escalation through local OS command injection vulnerability. Vulnerability Impact: An unauthenticated remote attacker can execute arbitrary OS commands on the Sophos appliance with the privileges of the spiderman operating system user. Affected Software/OS: Sophos Web Appliance versions 3.7.9 and earlier and 3.8.0 through 3.8.1 are known to be affected. Other versions might be affected as well. Solution: Update to version 3.7.9.1, 3.8.1.1 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-4983 http://www.coresecurity.com/advisories/sophos-web-protection-appliance-multiple-vulnerabilities Common Vulnerability Exposure (CVE) ID: CVE-2013-4984
Copyright	Copyright (C) 2013 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.