NetGain Systems Enterprise Manager Remote Code Execution Vulnerability in CVE-2017-16610)

NetGain Systems Enterprise Manager Remote Code Execution Vulnerability in CVE-2017-16610)
NetGain Systems Enterprise Manager Remote Code Execution Vulnerability in CVE-2017-16610)

Release date:
Updated on:

Affected Systems:

NetGain Systems Enterprise Manager

Description:

Bugtraq id: 102246
CVE (CAN) ID: CVE-2017-16610

NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform.

NetGain Enterprise Manager has a remote code execution vulnerability. Attackers can exploit this vulnerability to execute arbitrary code in the current user context.

<* Source: Jacob Baines
*>

Suggestion:

Vendor patch:

NetGain
-------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
Http://www.netgain-systems.com
Http://www.zerodayinitiative.com/advisories/ZDI-17-952/