Cogent DataHub is prone to a directory-traversal vulnerability, an information-disclosure vulnerability and to multiple buffer-overflow and integer-overflow vulnerabilities. Exploiting the issues may allow an attacker to obtain sensitive information that could aid in further attacks or may allow attackers to execute arbitrary code within the context of the privileged domain. Cogent DataHub 7.1.1.63 is vulnerable other versions may also be affected.

• http://aluigi.org/mytoolz/mydown.zip
• http://www.cogentdatahub.com/Products/Cogent_DataHub.html
• http://www.securityfocus.com/bid/49610

---

Updated on 2015-03-25