2X ApplicationServer TuxSystem ActiveX ExportSettings() Method Arbitrary File Overwrite

The install of the 2X ApplicationServer TuxSystem ActiveX control on the remote host reportedly could be abused to create or overwrite arbitrary files on the affected host using its 'ExportSettings' method. By tricking a user into opening a specially crafted web page, a remote, unauthenticated...

CVE-2012-1065

CVE-2012-1065 affects 2X ApplicationServer 10.1 Build 1224 via the TuxSystem ActiveX control (TuxScripting.dll). The ExportSettings() method allows remote attackers to create or overwrite arbitrary files on the target system. Nessus notes the vulnerability can be triggered by a user opening a cra...