CVE-2014-4872 | BDVDB-2026-64795 Detail

Description#

BMC Track-It! 11.3.0.355 does not require authentication on TCP port 9010, which allows remote attackers to upload arbitrary files, execute arbitrary code, or obtain sensitive credential and configuration information via a .NET Remoting request to (1) FileStorageService or (2) ConfigurationService.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://packetstormsecurity.com/files/128594/BMC-Track-it-Remote-Code-Execution-SQL-Injection.html
http://www.kb.cert.org/vuls/id/121036
https://raw.githubusercontent.com/pedrib/PoC/master/generic/bmc-track-it-11.3.txt

Exploit#

No public exploit known

History#

Version 12014-10-10Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.