CVE-2012-6274

BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

46.87% chance of exploitation in the next 30 days, 99th percentile

Published

2013-02-24

Updated

2024-09-16

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/bigant_server_dupf_…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/24528

References

• CVE Record
• NVD entry

Related

• CVE-2012-6272
• CVE-2012-6275
• CVE-2012-6151
• CVE-2012-6276
• CVE-2012-6096
• CVE-2012-6290