Preemptive Protection against Adobe Flash Media Server Directory Traversal Vulnerability (APSB09-18)
| Check Point Reference: | CPAI-2009-330 | |
| Date Published: | ||
| Preemptive Since: | ||
| Severity: | ||
| Source: | Adobe Security Bulletin - APSB09-18 | |
| Industry Reference(s): | CVE-2009-3792 | |
| Protection Provided by: |
Security Gateway
|
|
| Who is Vulnerable? Flash Media Server 3.5.2 and earlier versions | ||
| Vulnerability Description A directory traversal vulnerability has been discovered in Adobe Flash Media Server (FMS). Flash Media Server (FMS) is an application server for Flash-based applications. This vulnerability allows a hacker to access normally-inaccessible files and directories through a specially-created HTTP request. Instead of having access only to the publically-available files, the hacker can have access to all files and load arbitrary DLLS that are present on that server using this vulnerability. |
||
|
Update/Patch Available Apply patches: Adobe Security Bulletin - APSB09-18 |
|
|
Vulnerability Details The vulnerability is due to an input validation error in the Adobe Flash Media Server. Successful exploitation could lead to FMS loading arbitrary DLLs present on the server. |
Protection Overview
This protection will detect and block attempts to transfer malformed HTTP requests sent to the vulnerable server. No update is required to address this vulnerability.
To configure the defense, select your product from the list below and follow the related protection steps.