CVE-2011-1409 Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks a...
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Frams's Fast File EXchange (F*EX, aka fex) 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/fex(Debian:12) | < 20110610-1 | 20110610-1 |
| debian/fex(Debian:12) | = 20110601-1 | No fix listed |
| debian/fex(Debian:12) | = 20110608-1 | No fix listed |
| debian/fex(Debian:12) | = 20110608-2 | No fix listed |
| debian/fex(Debian:13) | < 20110610-1 | 20110610-1 |
| debian/fex(Debian:13) | = 20110601-1 | No fix listed |
| debian/fex(Debian:13) | = 20110608-1 | No fix listed |
| debian/fex(Debian:13) | = 20110608-2 | No fix listed |
| ulli horlacher fex | = 20100208 | No fix listed |
References
- Debian Security Tracker CVE-2011-1409 vendor-advisory
- fex.rus.uni-stuttgart.de patch
- 44940 third-party-advisory vendor-advisory
- DSA-2259 vendor-advisory
- 48239 vdb-entry
- fex-security-bypass(68005) vdb-entry