Vulnerability   
Search   
    Search 202850 CVE descriptions
and 87302 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.14241
Category:Remote file access
Title:4D WebStar Symbolic Link Vulnerability
Summary:4D WebStar is reportedly vulnerable to a local symbolic link vulnerability.
Description:Summary:
4D WebStar is reportedly vulnerable to a local symbolic link vulnerability.

Vulnerability Insight:
This issue is due to a design error that causes the application
to open files without properly verifying their existence or their absolute location.

Vulnerability Impact:
Successful exploitation of this issue will allow an attacker to write
to arbitrary files writable by the affected application, facilitating privilege escalation.

Solution:
Upgrade to 4D WebStar 5.3.3 or later.

CVSS Score:
3.6

CVSS Vector:
AV:L/AC:L/Au:N/C:P/I:P/A:N

Cross-Ref: BugTraq ID: 10714
Common Vulnerability Exposure (CVE) ID: CVE-2004-0698
@stake Security Advisory: A071304-1
http://www.atstake.com/research/advisories/2004/a071304-1.txt
ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt
XForce ISS Database: 4dwebstar-symlink(16689)
https://exchange.xforce.ibmcloud.com/vulnerabilities/16689
CopyrightCopyright (C) 2004 David Maciejak

This is only one of 87302 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2021 E-Soft Inc. All rights reserved.