Consona Dynamic Agent, Consona Repair Manager, Consona Subscriber Activation, Consona Subscriber Agent

ソフト名：Consona Dynamic Agent 7.0, Consona Repair Manager, Consona Subscriber Activation, Consona Subscriber Agent
回避策：未対応
脆弱性：セキュリティ制限の回避, ActiveXコントロール制限の回避, リモートコード実行, DNSの乗っ取り, 機密情報の奪取
ソース：http://www.wintercore.com/downloads/rootedcon_0day.pdf
http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1907
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1911
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1912
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1913
http://www.kb.cert.org/vuls/id/602801
CVE：CVE-2010-1907, CVE-2010-1911, CVE-2010-1912, CVE-2010-1913
危険性：High Risk

Consona Dynamic Agent, Consona Repair Manager, Consona Subscriber Activation, Consona Subscriber Agent

ソフト名：Consona Dynamic Agent 7.0, Consona Repair Manager, Consona Subscriber Activation, Consona Subscriber Agent
回避策：未対応
脆弱性：セキュリティ制限の回避, ActiveXコントロール制限の回避, リモートコード実行, DNSの乗っ取り, 機密情報の奪取
ソース：http://www.wintercore.com/downloads/rootedcon_0day.pdf
http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1907
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1911
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1912
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1913
http://www.kb.cert.org/vuls/id/602801
CVE：CVE-2010-1907, CVE-2010-1911, CVE-2010-1912, CVE-2010-1913
危険性：High Risk

Consona CRM Suite

ソフト名：Consona CRM Suite
回避策：パッチのインストール
脆弱性：権限の昇格, バッファオーバーフロー, リモートコード実行, DoS攻撃, ファイル操作, XSS
ソース：http://www.wintercore.com/downloads/rootedcon_0day.pdf
http://www.consona.com/Content/CRM/Support/SecurityBulletin_April2010.pdf
http://www.securityfocus.com/bid/40011
http://www.securityfocus.com/bid/40010
http://www.securityfocus.com/bid/40006
http://www.securityfocus.com/bid/40003
http://www.securityfocus.com/bid/39999
http://secunia.com/advisories/39752
http://secunia.com/advisories/39751
http://secunia.com/advisories/39740
危険性：High Risk