CVE-2012-6274

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 47%

from disclosure to weapon0 days

Published on NVDFeb 24

1st PoCFeb 20

metasploitJan 9

exploitation probability

47%top 1% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

BigAntSoft BigAnt IM Message Server does not require authentication for file uploading, which allows remote attackers to create arbitrary files under AntServer\DocData\Public via unspecified vectors.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/24528unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://www.kb.cert.org/vuls/id/990652