Lucene search

K
kasperskyKaspersky LabKLA10375
HistoryMar 20, 2008 - 12:00 a.m.

KLA10375 WLF vulnerability in UltraEdit

2008-03-2000:00:00
Kaspersky Lab
threats.kaspersky.com
49

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

47.2%

A directory traversal vulnerability was found in UltrEdit. By exploiting this vulnerability malicious users can create & overwrite arbitrary files. This vulnerability can be exploited remotely via a specially designed response.

Original advisories

Related products

UltraEdit

CVE list

CVE-2008-2795 warning

Solution

Update to latest version

Impacts

  • WLF

Write Local Files. Exploitation of vulnerabilities with this impact can lead to writing into some inaccessible files. Files that can be read depends on concrete program errors.

Affected Products

  • IDM Computer Solutions Inc UltraEdit version 14.00b

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.001

Percentile

47.2%