NVD

Id
56280  
Name
CVE-2007-4149  
Description
The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 does not require authentication for (1) the "LOG." command, which allows remote attackers to create or overwrite arbitrary files; (2) the SETTINGSFILE command, which allows remote attackers to overwrite the ini file, and reconfigure VSAOD or cause a denial of service; or (3) the UNINSTALL command, which allows remote attackers to cause a denial of service (daemon shutdown). NOTE: vector 1 can be leveraged for code execution by writing to a Startup folder.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-08-03  
Modified Date
2012-11-05  
Seq
2007-4149  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286664 56280 CVE-2007-4149 http://www.portcullis.co.uk/uplds/advisories/vafileover-06-039.txt  View
286665 56280 CVE-2007-4149 http://www.portcullis.co.uk/uplds/advisories/vainifileoverwrite%20-%2006_041.txt  View
286666 56280 CVE-2007-4149 http://www.portcullis.co.uk/uplds/advisories/vauninstall%2006_045.txt  View
286667 56280 CVE-2007-4149 25153  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57232 JVNDB-2007-005924 Visionsoft Audit の VSAOD における任意のファイルを作成される脆弱性 Visionsoft Audit の Visionsoft Audit on Demand Service (VSAOD) は、以下の影響を受ける脆弱性が存在します。 CVE-2007-4149 27504 CVE-2007-4149 56280 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005924.html 2007-08-03 2012-12-20 View