ScriptLogic 4.01, and possibly other versions before 4.14, uses insecure permissions for the LOGS$ share, which allows users to modify log records and possibly execute arbitrary code.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Scriptlogic | Scriptlogic | 4.01 (including) | 4.01 (including) |
References
- http://www.kb.cert.org/vuls/id/813737
- http://www.kb.cert.org/vuls/id/CRDY-5EXQT9
- http://www.securityfocus.com/bid/7476
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11922
- http://www.kb.cert.org/vuls/id/813737
- http://www.kb.cert.org/vuls/id/CRDY-5EXQT9
- http://www.securityfocus.com/bid/7476
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11922