CVE-2016-6598 File upload in n/a
Unauthenticated attackers can upload files to arbitrary paths via a remoting service, achieving code execution as SYSTEM.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-6598?
CVE-2016-6598 is a critical vulnerability in n/a, published on 30 Jan 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010. This service contains a method that allows uploading a file to an arbitrary path on the machine that is running Track-It!. This can be used to upload a file to the web root and achieve code execution as NETWORK SERVICE or SYSTEM.
Weakness: CWE-284
Which versions are affected by CVE-2016-6598?
It affects 1 product.
Products include Bmc Track-It\!.
How do I fix CVE-2016-6598?
No fix has been published for CVE-2016-6598 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-6598 being exploited?
There is no known exploitation of CVE-2016-6598 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-58cq-gm2c-925j.