Detections
Analytics
Adobe Flash Media Server < 3.0.5 / 3.5.3 Multiple Vulnerabilities (APSB09-18)
critical Nessus Plugin ID 43390
Language:
Synopsis
The remote media server is affected by multiple vulnerabilities.Description
The remote host is running Adobe Flash Media Server, an application server for Flash-based applications.The version running on the remote host is earlier than version 3.0.5 or 3.5.3. Such versions are potentially affected by the following vulnerabilities :
- A resource exhaustion vulnerability can lead to a denial of service. (CVE-2009-3791)
- A directory traversal vulnerability can lead to FMS loading arbitrary DLLs present on the server.
(CVE-2009-3792)
Solution
Upgrade to Flash Media Server 3.0.5 / 3.5.3 or later.See Also
https://www.adobe.com/support/security/bulletins/apsb09-18.html
Plugin Details
Severity: Critical
ID: 43390
File Name: adobe_fms_3_5_3.nasl
Version: 1.14
Type: remote
Family: Misc.
Published: 12/22/2009
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:adobe:flash_media_server
Required KB Items: rtmp/adobe_fms
Exploit Ease: No known exploits are available
Patch Publication Date: 12/18/2009
Vulnerability Publication Date: 12/18/2009
Reference Information
CVE: CVE-2009-3791, CVE-2009-3792