Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-1409
HistoryJun 24, 2011 - 12:00 a.m.

CVE-2011-1409

2011-06-2400:00:00
ubuntu.com
ubuntu.com
8

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

79.3%

Frams’s Fast File EXchange (F*EX, aka fex) 20100208, and possibly other
versions before 20110610, allows remote attackers to bypass authentication
and upload arbitrary files via a request that lacks an authentication ID.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchfex< 20091210+debian0-2ubuntu0.1UNKNOWN
ubuntu10.10noarchfex< 20100208+debian1-1+squeeze1build0.10.10.1UNKNOWN
ubuntu11.04noarchfex< 20100208+debian1-1+squeeze1build0.11.04.1UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.007 Low

EPSS

Percentile

79.3%