CVE-2020-13866

概要

参考情報

• hyp3rlinx.altervista.org/advisories/WINGATE-INSECURE-PERMISSIONS-LOCAL-PRIVILEGE-ESCALATION.txt · Third Party Advisory
• packetstormsecurity.com/files/157958/WinGate-9.4.1.5998-Insecure-Permissions-Privilege-Escalation.html · Third Party Advisory
• seclists.org/fulldisclosure/2020/Jun/11 · Third Party Advisory

wingate のその他の脆弱性

• CVE-2009-0802中 5.4Qbik WinGate, when transparent interception mode is enabled, uses the HTTP Host header to determine the remote endpoint, which allows remote…
• CVE-2008-3606中 6.5Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users to cause a denial of…
• CVE-2007-4335中 5.0Format string vulnerability in the SMTP server component in Qbik WinGate 5.x and 6.x before 6.2.2 allows remote attackers to cause a denial …
• CVE-2006-4518中 5.0Qbik WinGate 6.1.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a DNS request with a self-referenc…
• CVE-2006-2917中 5.5Directory traversal vulnerability in the IMAP server in WinGate 6.1.2.1094 and 6.1.3.1096, and possibly other versions before 6.1.4 Build 10…