ID de Prueba:	1.3.6.1.4.1.25623.1.0.14241
Categoría:	Remote file access
Título:	4D WebStar Symbolic Link Vulnerability
Resumen:	4D WebStar is reportedly vulnerable to a local symbolic link vulnerability.
Descripción:	Summary: 4D WebStar is reportedly vulnerable to a local symbolic link vulnerability. Vulnerability Insight: This issue is due to a design error that causes the application to open files without properly verifying their existence or their absolute location. Vulnerability Impact: Successful exploitation of this issue will allow an attacker to write to arbitrary files writable by the affected application, facilitating privilege escalation. Solution: Upgrade to 4D WebStar 5.3.3 or later. CVSS Score: 3.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N
Referencia Cruzada:	BugTraq ID: 10714 Common Vulnerability Exposure (CVE) ID: CVE-2004-0698 @stake Security Advisory: A071304-1 http://www.atstake.com/research/advisories/2004/a071304-1.txt ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt XForce ISS Database: 4dwebstar-symlink(16689) https://exchange.xforce.ibmcloud.com/vulnerabilities/16689
Copyright	Copyright (C) 2004 David Maciejak

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.