Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-1093
HistorySep 18, 2008 - 3:04 p.m.

CVE-2008-1093

2008-09-1815:04:27
CWE-94
[email protected]
web.nvd.nist.gov
26
acresso
installshield
update agent
cve-2008-1093
flexnet connect
security vulnerability
man-in-the-middle
nvd

7.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.9%

JSON

Acresso InstallShield Update Agent does not properly verify the authenticity of Rule Scripts obtained from GetRules.asp web pages on FLEXnet Connect servers, which allows remote man-in-the-middle attackers to execute arbitrary VBScript code via Trojan horse Rules.

Affected configurations

NVD
Node
acressoflexnet_connect
OR
acressointallshield_update_agent

Related

securityvulns 2
prion 1
nvd 1
cert 1
cvelist 1
securityvulns
securityvulns
InstallShield Update Services server spoofing
2008-09-16 00:00:00
InstallShield Update Agent - Downloads and executes "Rule Scripts" insecurely.
2008-09-16 00:00:00
prion
prion
Design/Logic Flaw
2008-09-18 15:04:00
nvd
nvd
CVE-2008-1093
2008-09-18 15:04:27
cert
cert
InstallShield / Macrovision / Acresso FLEXnet Connect insecurely retrieves and executes scripts
2008-09-16 00:00:00
cvelist
cvelist
CVE-2008-1093
2008-09-17 18:06:00

7.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.9%

JSON
Related for CVE-2008-1093
securityvulns2prion1nvd1cert1cvelist1