EUVD-2011-5189

Malware in sbrugna...

CVE-2011-5290

The SaveToFile method in the UniBasicPack.UniTextBox ActiveX control in UniBasic100EDA1811C.ocx in IDrive Online Backup 3.4.0 allows remote attackers to write to arbitrary files via a pathname in the first argument...

CVE-2011-5290

The SaveToFile method in the UniBasicPack.UniTextBox ActiveX control in UniBasic100EDA1811C.ocx in IDrive Online Backup 3.4.0 allows remote attackers to write to arbitrary files via a pathname in the first argument...

Design/Logic Flaw

The SaveToFile method in the UniBasicPack.UniTextBox ActiveX control in UniBasic100EDA1811C.ocx in IDrive Online Backup 3.4.0 allows remote attackers to write to arbitrary files via a pathname in the first argument...

CVE-2011-5290

Technical summary (CVE-2011-5290): The vulnerability affects IDrive Online Backup 3.4.0, specifically the UniBasic100_EDA1811C.ocx’s UniBasicPack.UniTextBox ActiveX control. The SaveToFile method can be abused to write to arbitrary files by supplying a pathname as the first argument. This is a re...

IDrive Online Backup ActiveX unsafe method

Unsafe SaveToFile method...

IDrive Online Backup ActiveX control Insecure Method

Vulnerability ID: HTB23025 Reference: http://www.htbridge.ch/advisory/idriveonlinebackupactivexcontrolinsecuremethod.html Product: IDrive Online Backup Vendor: Pro Softnet Corporation http://www.idrive.com Vulnerable Version: 3.4.0 and probably prior Tested on: 3.4.0 Vendor Notification: 15 June...

IDrive Online Backup ActiveX Control < 3.4.1 Arbitrary File Overwrite

The version of IDrive installed on the remote Windows host is earlier than 3.4.1 and includes a third-party ActiveX control named UniBasicPack.UniTextBox from CyberActiveX with an insecure method. Specifically, the 'SaveToFile' method can be abused to overwrite arbitrary files. Note that this...

iDrive Online Backup 3.4.0 Insecure Method

Vulnerability ID: HTB23025 Reference: http://www.htbridge.ch/advisory/idriveonlinebackupactivexcontrolinsecuremethod.html Product: IDrive Online Backup Vendor: Pro Softnet Corporation http://www.idrive.com Vulnerable Version: 3.4.0 and probably prior Tested on: 3.4.0 Vendor Notification: 15 June...

Pro Softnet IDrive Online Backup 3.4.0 - ActiveX SaveToFile() Arbitrary File Overwrite

Pro Softnet IDrive Online Backup 3.4.0 - ActiveX SaveToFile Arbitrary File Overwrite source: https://www.securityfocus.com/bid/48582/info Pro Softnet IDrive Online Backup ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. A...

Pro Softnet IDrive Online Backup 3.4.0 - ActiveX &#039;SaveToFile()&#039; Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/48582/info Pro Softnet IDrive Online Backup ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary, attacker-controlled content. An attacker can exploit this issue to corrupt and overwrite arbitrary files on a...

IDrive Online Backup ActiveX control Insecure Method

High-Tech Bridge SA Security Research Lab has discovered vulnerability in IDrive Online Backup ActiveX control, which can be exploited to overwrite arbitrary files. 1 Insecure method in IDrive Online Backup ActiveX Control The vulnerability is caused due to the UniBasicPack.UniTextBox...