CVE-2013-6795

CRITICO 9.3CVE-2013-6795 · Published 24/12/2013 · updated 17/06/2026

In breve

CVE-2013-6795 è una vulnerabilità CRITICO (CVSS 9.3) che riguarda openstack windows guest agent (rackspace).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 5.3%, superiore al 92.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
openstack windows guest agent rackspace	`≤ 1.2.5.0`	No fix yet

Description

The Updater in Rackspace Openstack Windows Guest Agent for XenServer before 1.2.6.0 allows remote attackers to execute arbitrary code via a crafted serialized .NET object to TCP port 1984, which triggers the download and extraction of a ZIP file that overwrites the Agent service binary.

References

archives.neohapsis.com/archives/bugtraq/2013-11/0122.html
blog.cloudpassage.com/2013/11/18/cve-2013-6795-vulnerability-rackspace-windows-agent-updater · URL Repurposed
osvdb.org/100191
packetstormsecurity.com/files/124153/Rackspace-Windows-Agent-Updater-Arbitrary-Code-Execution.html
secunia.com/advisories/55775
rackerlabs/openstack-guest-agents-windows-xenserver commit ef16f88 · Exploit
rackerlabs/openstack-guest-agents-windows-xenserver release 1.2.6.0

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free