CVE-2017-9813

概要

参考情報

• packetstormsecurity.com/files/143190/Kaspersky-Anti-Virus-File-Server-8.0.3.297-XSS-CSRF-Code-Execution.html · Exploit
• seclists.org/fulldisclosure/2017/Jun/33 · Exploit
• securityfocus.com/bid/99330 · Third Party Advisory
• securitytracker.com/id/1038798 · Third Party Advisory
• coresecurity.com/advisories/kaspersky-anti-virus-file-server-multiple-vulnerabilities · Exploit
• exploit-db.com/exploits/42269

anti-virus for linux server のその他の脆弱性

• CVE-2017-9812高 7.5The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server…
• CVE-2017-9811緊急 9.8The kluser is able to interact with the kav4fs-control binary in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critic…
• CVE-2017-9810高 8.8There are no Anti-CSRF tokens in any forms on the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Crit…