SecuritySpace - CVE-2016-6598

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2016-6598

Description: BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010. This service contains a method that allows uploading a file to an arbitrary path on the machine that is running Track-It!. This can be used to upload a file to the web root and achieve code execution as NETWORK SERVICE or SYSTEM.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-6598
http://seclists.org/fulldisclosure/2018/Jan/92
http://packetstormsecurity.com/files/146110/BMC-Track-It-11.4-Code-Execution-Information-Disclosure.html
https://github.com/pedrib/PoC/blob/master/advisories/bmc-track-it-11.4.txt

CVE ID:	CVE-2016-6598
Description:	BMC Track-It! 11.4 before Hotfix 3 exposes an unauthenticated .NET remoting file storage service (FileStorageService) on port 9010. This service contains a method that allows uploading a file to an arbitrary path on the machine that is running Track-It!. This can be used to upload a file to the web root and achieve code execution as NETWORK SERVICE or SYSTEM.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6598 http://seclists.org/fulldisclosure/2018/Jan/92 http://packetstormsecurity.com/files/146110/BMC-Track-It-11.4-Code-Execution-Information-Disclosure.html https://github.com/pedrib/PoC/blob/master/advisories/bmc-track-it-11.4.txt