Changetrack Local Privilege Escalation Vulnerability

  1. Network Vulnerabilities
  2. Privilege escalation
  3. Changetrack Local Privilege Escalation Vulnerability
Summary
This host has Changetrack installed and is prone to Local Privilege Escalation vulnerability.
Impact
Attacker may leverage this issue by executing arbitrary commands via CRLF sequences and shell metacharacters in a filename in a directory that is checked by changetrack. Impact Level: Application
Solution
Upgrade to Changetrack version 4.7 or later For updates refer to http://changetrack.sourceforge.net/
Insight
This flaw is generated because the application does not properly handle certain file names.
Affected
Changetrack version 4.3
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities