EUVD-2008-2001

Malware in sbrugna...

Remote code execution

BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackers to 1 cause a denial of service via multiple invocations of uninst.exe, and have an unknown impact via 2 badblue.exe and 3 dyndns.exe. NOTE: this can be...

CVE-2008-2003

BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackers to 1 cause a denial of service via multiple invocations of uninst.exe, and have an unknown impact via 2 badblue.exe and 3 dyndns.exe. NOTE: this can be...

CVE-2007-6378

CVE-2007-6378 is a directory-traversal vulnerability in BadBlue 2.72b and earlier, affecting the upload.dll component. An attacker can supply a filename with ".." to create or overwrite arbitrary files remotely. The provided documents specify only the vulnerability description and do not include ...