NVD

Id
1054  
Name
CVE-2008-1093  
Description
Acresso InstallShield Update Agent does not properly verify the authenticity of Rule Scripts obtained from GetRules.asp web pages on FLEXnet Connect servers, which allows remote man-in-the-middle attackers to execute arbitrary VBScript code via Trojan horse Rules.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-18  
Modified Date
2011-03-07  
Seq
2008-1093  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
6458 1054 CVE-2008-1093 4268  View
6459 1054 CVE-2008-1093 VU#837092  View
6460 1054 CVE-2008-1093 20080916 InstallShield Update Agent - Downloads and executes "Rule Scripts" insecurely.  View
6461 1054 CVE-2008-1093 31204  View
6462 1054 CVE-2008-1093 1020893  View
6463 1054 CVE-2008-1093 http://www.simplicity.net/vuln/CVE-2008-1093.txt  View
6464 1054 CVE-2008-1093 ADV-2008-2613  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46421 JVNDB-2008-001731 InstallShield および FLEXnet Connect の通信処理の問題によるスクリプト実行の脆弱性 Acresso Software が提供する InstallShield および FLEXnet Connect には、ソフトウェアの更新確認などの通信処理に問題があります。結果として遠隔の第三者に任意のスクリプトを実行される可能性があります。 CVE-2008-1093 31206 CVE-2008-1093 1054 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001731.html 2008-09-17 2008-10-14 View