NVD

Id
41677  
Name
CVE-2013-6795  
Description
The Updater in Rackspace Openstack Windows Guest Agent for XenServer before 1.2.6.0 allows remote attackers to execute arbitrary code via a crafted serialized .NET object to TCP port 1984, which triggers the download and extraction of a ZIP file that overwrites the Agent service binary.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2013-12-24  
Modified Date
2013-12-26  
Seq
2013-6795  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
210762 41677 CVE-2013-6795 20131122 CVE-2013-6795 Vulnerability in the Rackspace Windows Agent and Updater  View
210763 41677 CVE-2013-6795 http://blog.cloudpassage.com/2013/11/18/cve-2013-6795-vulnerability-rackspace-windows-agent-updater/  View
210764 41677 CVE-2013-6795 http://packetstormsecurity.com/files/124153/Rackspace-Windows-Agent-Updater-Arbitrary-Code-Execution.html  View
210765 41677 CVE-2013-6795 https://github.com/rackerlabs/openstack-guest-agents-windows-xenserver/commit/ef16f88f20254b8083e361f11707da25f8482401  View
210766 41677 CVE-2013-6795 https://github.com/rackerlabs/openstack-guest-agents-windows-xenserver/releases/tag/1.2.6.0  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24141 JVNDB-2013-005716 XenServer 用 Rackspace Openstack Windows Guest Agent の Updater における任意のコードを実行される脆弱性 XenServer 用 Rackspace Openstack Windows Guest Agent の Updater には、任意のコードを実行される脆弱性が存在します。 CVE-2013-6795 66737 CVE-2013-6795 41677 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005716.html 2013-10-17 2013-12-27 View