Synactis All_IN_THE_BOX ActiveX 3.0 - Null byte File Overwrite Vuln

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-006 http://www.dsecrg.com/pages/vul/show.php?id=62 Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL: http://synactis.com Bugs: Null byte File overwriting Exploits: YES Reported:...

Synactis All-In-The-Box ActiveX Remote Code Execution Vulnerability

This host is installed with All-In-The-Box ActiveX and is prone to Remote Code Execution Vulnerability. OpenVAS Vulnerability Test $Id: gbsynactisallintheboxactivexcodeexecvuln.nasl 5369 2017-02-20 14:48:07Z cfi $ Synactis All-In-The-Box ActiveX Remote Code Execution Vulnerability Authors: Sujit...

Synactis All-In-The-Box ActiveX RCE Vulnerability

All-In-The-Box ActiveX is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-0465

The SaveDoc method in the AllInTheBox.AllBox ActiveX control in ALLINTHEBOX.OCX in Synactis ALL In-The-Box ActiveX 3 allows remote attackers to create and overwrite arbitrary files via an argument ending in a '\0' character, which bypasses the intended .box filename extension, as demonstrated by ...

Code injection

The SaveDoc method in the AllInTheBox.AllBox ActiveX control in ALLINTHEBOX.OCX in Synactis ALL In-The-Box ActiveX 3 allows remote attackers to create and overwrite arbitrary files via an argument ending in a '\0' character, which bypasses the intended .box filename extension, as demonstrated by ...

Synactis ALL In-The-Box ActiveX控件SaveDoc()方法覆盖任意文件漏洞

Synactis ALL In-The-Box ActiveX控件是一种PDF及图像文件自动化生成及输出工具。 ALL In-The-Box ActiveX控件AllInTheBox.ocx的SaveDoc方法实现上存在漏洞，远程攻击者可能利用此漏洞通过指定以NULL结尾的文件名覆盖系统上的任意文件，导致拒绝服务或任意命令执行。 Synactis ALL In-The-Box ActiveX 3.x 厂商补丁： Synactis -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.synactis.com...