CVE-2007-6033

Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions (Everyone/Full Control), which allows remote authenticated attackers, and possibly anonymous users, to execute arbitrary programs.

Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions (Everyone/Full Control), which allows remote authenticated attackers, and possibly anonymous users, to execute arbitrary programs.

Invensys Wonderware InTouch versión 8.0, crea un recurso compartido NetDDE con permisos no seguros (Everyone/Full Control), que permite a atacantes autenticados remotos, y posiblemente a usuarios anónimos, ejecutar programas arbitrarios.