SEC Consult SA-20140528-0 :: Root Backdoor & Unauthenticated access to voice recordings in NICE Recording eXpress

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SEC Consult Vulnerability Lab Security Advisory 20140528-0 ======================================================================= title: Root Backdoor & Unauthenticated access to voice recordings product: NICE Recording eXpress voice recording soluti...

NICE Recording eXpress multiple security vulnerabilities

Multiple security vulnerability, including privileged backdoor access...

CVE-2014-2180

The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133...

CVE-2014-2180

The Cisco advisory for CVE-2014-2180 describes a vulnerability in the Document Management component of Cisco Unified Contact Center Express where insufficient parameter validation allows an authenticated, remote attacker to upload files to arbitrary filesystem locations via a crafted HTTP request...

PT-2014-4537

Name of the Vulnerable Software and Affected Versions Cisco Unified Contact Center Express affected versions not specified Description The issue is related to the Document Management component, which fails to properly validate a parameter. This allows remote authenticated users to upload files to...

CVE-2014-2180: Improper Input Validation

The Document Management component in Cisco Unified Contact Center Express does not properly validate a parameter, which allows remote authenticated users to upload files to arbitrary pathnames via a crafted HTTP request, aka Bug ID CSCun74133...

Internet Explorer Outlook Express Address Book ActiveX Denial of Service - Ver2 (CVE-2005-4840)

A denial-of-service vulnerability has been reported in Microsoft Outlook Express Book Control. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

CVE-2013-5365

Autodesk SketchBook vulnerability CVE-2013-5365 is a heap-based buffer overflow in affected SketchBook variants (Enterprise 2014, Pro, Express before 6.25; Copic Edition before 2.0.2). The flaw occurs while decompressing RLE-compressed channel data in PSD files, enabling remote code execution. Re...

CVE-2013-5443

Cross-site request forgery CSRF vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2013-5444

The server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to read encrypted credentials via unspecified vectors...

CVE-2013-5445

IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows local users to obtain sensitive cleartext information by leveraging knowledge of a static decryption key...

Code injection

The server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to read encrypted credentials via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to hijack the authentication of arbitrary users...

Code injection

IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows local users to obtain sensitive cleartext information by leveraging knowledge of a static decryption key...

CVE-2013-5443

Cross-site request forgery CSRF vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2013-5444

The server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to read encrypted credentials via unspecified vectors...

CVE-2013-5445

IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows local users to obtain sensitive cleartext information by leveraging knowledge of a static decryption key...

CVE-2013-5445

IBM Cognos Express contains CVE-2013-5445 where encrypted credentials can be remotely retrieved from the server due to knowledge of a static decryption key. Affected products/versions include Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1. IBM’s bul...

CVE-2013-5443

CVE-2013-5443 is a CSRF vulnerability in IBM Cognos Express that can allow an attacker to hijack the authentication of an authenticated user. Affected versions include Cognos Express 9.0, 9.5, 10.1 (all before their IFIX 2) and 10.2.1 before FP1. The IBM Security Bulletin lists remediation by app...

CVE-2013-5444

CVE-2013-5444 affects IBM Cognos Express 9.0/9.5/10.1 before IFIX 2 and 10.2.1 before FP1. The vulnerability stems from using a static key for encryption, enabling remote attackers to read encrypted credentials via unspecified vectors. IBM’s security bulletin lists remediation by applying fixes i...