Bennet.Tec.TList.ActiveX.Control.Arbitrary.File.Creation

Release Date Nov 25, 2011
Severity high
Impact System Compromise: Remote attackers can gain control of vulnerable systems
Description This indicates an attack attempt to exploit a Remote File Creation vulnerability in Bennet-Tec Tlist. The vulnerability which is located in the "TListX.ocx" ActiveX control, where X is the version number from 6 to 8, can be exploited through misuse of a vulnerable method. As a result, a remote attacker can potentially create or overwrite arbitrary files within the system.
Affected Products Bennet-Tec TList 6 Bennet-Tec TList 7 Bennet-Tec TList 8
Recommended Actions Disable this ActiveX Control by setting its kill bit, by the method shown on the website: http://support.microsoft.com/kb/240797
Coverage IPS VCM
Reference/s http://retrogod.altervista.org/9sg_ohfm_adv.html http://www.securityfocus.com/bid/50476 (BugTraq)

Fortinet