CVE-2010-1906 tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \.\pipe__RepairSe...
HighCVSS 7.2
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \.\pipe__RepairService_pipe__company named pipe, which allows remote authenticated users to execute arbitrary code by obtaining the current time from (1) tcpip.sys or (2) an SMB2 service.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| consona dynamic agent | All versions | No fix listed |
| consona repair manager | All versions | No fix listed |
| consona subscriber activation | All versions | No fix listed |
| consona subscriber agent | All versions | No fix listed |
References
- 39752 third-party-advisory vendor-advisory
- wintercore.com
- www.consona.com patch vendor-advisory
- VU#602801 patch third-party-advisory us-government-resource
- 20100507 [Wintercore Research] Consona Products - Multiple vulnerabilities mailing-list
- www.wintercore.com exploit