CVE-2023-54337

概要

参考情報

• exploit-db.com/exploits/51066 · Exploit
• sysax.com · Product
• vulncheck.com/advisories/sysax-multi-server-password-denial-of-service-poc · Third Party Advisory

multi server のその他の脆弱性

• CVE-2012-10060緊急 9.8Sysax Multi Server versions prior to 5.55 contain a stack-based buffer overflow in its SSH service. When a remote attacker supplies an overl…
• CVE-2013-10065高 7.5A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A specially crafted SSH key exchange packet …
• CVE-2024-53458高 7.5Sysax Multi Server 6.99 is vulnerable to a denial of service (DoS) condition when processing specially crafted SSH packets.
• CVE-2024-53459中 5.4Sysax Multi Server 6.99 is vulnerable to Cross Site Scripting (XSS) via the /scgi?sid parameter.
• CVE-2020-23574中 6.5When uploading a file in Sysax Multi Server 6.90, an authenticated user can modify the filename="" parameter in the uploadfile_name1.htm for…