Detections
Analytics
Adobe Flash Media Server < 3.0.5 / 3.5.3 Multiple Vulnerabilities (APSB09-018) (RTMP over HTTP)
high Nessus Network Monitor Plugin ID 5283
Synopsis
The remote host is vulnerable to multiple attack vectorsDescription
The remote host is running Adobe Flash Media server. The installed version of Adobe Flash Media server appears to be earlier than 3.0.5 or 3.5.3. Such versions are potentially affected by multiple vulnerabilities :- A resource exhaustion vulnerability that could lead to a denial of service. (CVE-2009-3791)
- A directory traversal vulnerability that could lead to FMS loading arbitrary DLLs present on the server. (CVE-2009-3792)
Solution
Upgrade to Adobe Flash Media Server 3.0.5, 3.5.3 or later.See Also
http://www.adobe.com/support/security/bulletins/apsb09-18.html
Plugin Details
Severity: High
ID: 5283
Family: Web Servers
Published: 12/22/2009
Updated: 3/6/2019
Nessus ID: 43390
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: High
Base Score: 7.3
Temporal Score: 6.4
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:adobe:flash_media_server
Patch Publication Date: 12/18/2009
Vulnerability Publication Date: 12/18/2009
Reference Information
CVE: CVE-2009-3791, CVE-2009-3792