CVE-2013-3626

Directory traversal vulnerability in the Session Server in Attachmate Verastream Host Integrator (VHI) 6.0 through 7.5 SP 1 HF 1 allows remote attackers to upload and execute arbitrary files via a crafted message.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cret@cert.org

Published

2013-11-06

Last modified

2024-09-17

Weaknesses

CWE-22

Affected products

• Verastream Host Integrator (Attachmate)

References

• http://support.attachmate.com/techdocs/2700.html
• http://www.kb.cert.org/vuls/id/436214