CVE-2013-6795 - The Updater in Rackspace Openstack Windows Guest Agent for XenServer before 1.2.6.0 allows remote attackers to execute arbitrary code via a crafted serialized .NET object to TCP port 1984, which triggers the download and extraction of a ZIP file that overwrites the Agent service binary

Back Back to CVE browser

HIGH

The Updater in Rackspace Openstack Windows Guest Agent for XenServer before 1.2.6.0 allows remote attackers to execute arbitrary code via a crafted serialized .NET object to TCP port 1984, which triggers the download and extraction of a ZIP file that overwrites the Agent service binary

Published Dec 24, 2013

9.3

HIGH

CVSS 2.0

EPSS 5.34%

Description

The Updater in Rackspace Openstack Windows Guest Agent for XenServer before 1.2.6.0 allows remote attackers to execute arbitrary code via a crafted serialized .NET object to TCP port 1984, which triggers the download and extraction of a ZIP file that overwrites the Agent service binary.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (7)

http://archives.neohapsis.com/archives/bugtraq/2013-11/0122.html
mailing-listx_refsource_BUGTRAQ
http://blog.cloudpassage.com/2013/11/18/cve-2013-6795-vulnerability-rackspace-windows-agent-updater/
x_refsource_MISCURL Repurposed
http://osvdb.org/100191
vdb-entryx_refsource_OSVDB
http://packetstormsecurity.com/files/124153/Rackspace-Windows-Agent-Updater-Arbitrary-Code-Execution.html
x_refsource_MISC
http://secunia.com/advisories/55775
third-party-advisoryx_refsource_SECUNIA
https://github.com/rackerlabs/openstack-guest-agents-windows-xenserver/commit/ef16f88f20254b8083e361f11707da25f8482401
x_refsource_CONFIRMExploitPatch
https://github.com/rackerlabs/openstack-guest-agents-windows-xenserver/releases/tag/1.2.6.0
x_refsource_CONFIRM

Link	Providers	Tags
http://archives.neohapsis.com/archives/bugtraq/2013-11/0122.html		mailing-listx_refsource_BUGTRAQ
http://blog.cloudpassage.com/2013/11/18/cve-2013-6795-vulnerability-rackspace-windows-agent-updater/		x_refsource_MISCURL Repurposed
http://osvdb.org/100191		vdb-entryx_refsource_OSVDB
http://packetstormsecurity.com/files/124153/Rackspace-Windows-Agent-Updater-Arbitrary-Code-Execution.html		x_refsource_MISC
http://secunia.com/advisories/55775		third-party-advisoryx_refsource_SECUNIA
https://github.com/rackerlabs/openstack-guest-agents-windows-xenserver/commit/ef16f88f20254b8083e361f11707da25f8482401		x_refsource_CONFIRMExploitPatch
https://github.com/rackerlabs/openstack-guest-agents-windows-xenserver/releases/tag/1.2.6.0		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 24, 2013

Updated Aug 6, 2024

Reserved Nov 15, 2013

Link CVE-2013-6795

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2013-6795

Red Hat

Severity n/a

Public date n/a

Links CVE-2013-6795