Signature Detail
Short Name |
APP:BIGANT-SERVER-FILE-UPLOAD |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
BigAnt Server File Upload |
Release Date |
2013/04/08 |
Update Number |
2252 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
APP: BigAnt Server File Upload
This signature detects attempts to exploit a known vulnerability against BigAnt Server. Successful exploitation would result in arbitrary code execution with the privileges of the System user.
Extended Description
BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors.
Affected Products
- bigantsoft bigant_im_message_server -
References
- BugTraq: 57214
- CVE: CVE-2012-6274