Refine your search

5 vulnerabilities found for AttacheCase by HiBARA Software

jvndb-2022-000022
Vulnerability from jvndb
Published
2022-03-30 14:00
Modified
2024-06-21 11:42
Severity ?
7.8 (High) - cvssV3_0 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Summary
AttacheCase may insecurely load Dynamic Link Libraries
Details
AttacheCase may insecurely load Dynamic Link Libraries. AttacheCase is an open source file encryption software provided by HiBARA Software. AttacheCase contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427). Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-000022.html",
  "dc:date": "2024-06-21T11:42+09:00",
  "dcterms:issued": "2022-03-30T14:00+09:00",
  "dcterms:modified": "2024-06-21T11:42+09:00",
  "description": "AttacheCase may insecurely load Dynamic Link Libraries.\r\n\r\nAttacheCase is an open source file encryption software provided by HiBARA Software.\r\nAttacheCase contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427).\r\n\r\nTaizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2022/JVNDB-2022-000022.html",
  "sec:cpe": {
    "#text": "cpe:/a:hibara:attachecase",
    "@product": "AttacheCase",
    "@vendor": "HiBARA Software",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "6.8",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
      "@version": "2.0"
    },
    {
      "@score": "7.8",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2022-000022",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN10140834/index.html",
      "@id": "JVN#10140834",
      "@source": "JVN"
    },
    {
      "#text": "https://jvn.jp/en/ta/JVNTA91240916/",
      "@id": "JVNTA#91240916",
      "@source": "JVN"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2022-28128",
      "@id": "CVE-2022-28128",
      "@source": "CVE"
    },
    {
      "#text": "https://www.cve.org/CVERecord?id=CVE-2022-25348",
      "@id": "CVE-2022-25348",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2022-28128",
      "@id": "CVE-2022-28128",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2022-25348",
      "@id": "CVE-2022-25348",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "AttacheCase may insecurely load Dynamic Link Libraries"
}

jvndb-2018-000090
Vulnerability from jvndb
Published
2018-08-06 14:10
Modified
2019-07-25 14:32
Severity ?
3.3 (Low) - cvssV3_0 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Summary
Multiple directory traversal vulnerabilities in AttacheCase
Details
AttacheCase is an open source file encryption software provided by HiBARA Software. AttacheCase contains a directory traversal vulnerability (CWE-22) due to a flaw in processing filenames in ATC files. Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported CVE-2018-0660 vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-000090.html",
  "dc:date": "2019-07-25T14:32+09:00",
  "dcterms:issued": "2018-08-06T14:10+09:00",
  "dcterms:modified": "2019-07-25T14:32+09:00",
  "description": "AttacheCase is an open source file encryption software provided by HiBARA Software. AttacheCase contains a directory traversal vulnerability (CWE-22) due to a flaw in processing filenames in ATC files.\r\n\r\nTaizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported CVE-2018-0660 vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2018/JVNDB-2018-000090.html",
  "sec:cpe": [
    {
      "#text": "cpe:/a:hibara:attachecase",
      "@product": "AttacheCase",
      "@vendor": "HiBARA Software",
      "@version": "2.2"
    },
    {
      "#text": "cpe:/a:hibara:attachecase",
      "@product": "AttacheCase",
      "@vendor": "HiBARA Software",
      "@version": "2.2"
    }
  ],
  "sec:cvss": [
    {
      "@score": "4.3",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
      "@version": "2.0"
    },
    {
      "@score": "3.3",
      "@severity": "Low",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2018-000090",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN62121133/index.html",
      "@id": "JVN#62121133",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0659",
      "@id": "CVE-2018-0659",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0660",
      "@id": "CVE-2018-0660",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2018-0659",
      "@id": "CVE-2018-0659",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2018-0660",
      "@id": "CVE-2018-0660",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-22",
      "@title": "Path Traversal(CWE-22)"
    }
  ],
  "title": "Multiple directory traversal vulnerabilities in AttacheCase"
}

jvndb-2017-000174
Vulnerability from jvndb
Published
2017-07-14 13:38
Modified
2022-03-31 17:43
Severity ?
7.8 (High) - cvssV3_0 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Summary
Self-Extracting Encrypted Files created by AttacheCase may insecurely load Dynamic Link Libraries
Details
AttacheCase is an open source file encryption software provided by HiBARA Software. It can also create self-extracting encrypted files. Self-extracting encrypted files created by AttacheCase contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427). Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000174.html",
  "dc:date": "2022-03-31T17:43+09:00",
  "dcterms:issued": "2017-07-14T13:38+09:00",
  "dcterms:modified": "2022-03-31T17:43+09:00",
  "description": "AttacheCase is an open source file encryption software provided by HiBARA Software. It can also create self-extracting encrypted files. Self-extracting encrypted files created by AttacheCase contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries (CWE-427).\r\n\r\nEili Masami of Tachibana Lab. reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000174.html",
  "sec:cpe": {
    "#text": "cpe:/a:hibara:attachecase",
    "@product": "AttacheCase",
    "@vendor": "HiBARA Software",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "6.8",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
      "@version": "2.0"
    },
    {
      "@score": "7.8",
      "@severity": "High",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2017-000174",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN61502349/index.html",
      "@id": "JVN#61502349",
      "@source": "JVN"
    },
    {
      "#text": "https://jvn.jp/en/ta/JVNTA91240916/",
      "@id": "JVNTA#91240916",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2271",
      "@id": "CVE-2017-2271",
      "@source": "CVE"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2272",
      "@id": "CVE-2017-2272",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2017-2271",
      "@id": "CVE-2017-2271",
      "@source": "NVD"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2017-2272",
      "@id": "CVE-2017-2272",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "Self-Extracting Encrypted Files created by AttacheCase may insecurely load Dynamic Link Libraries"
}

jvndb-2017-000008
Vulnerability from jvndb
Published
2017-01-16 14:35
Modified
2017-06-06 16:13
Severity ?
3.3 (Low) - cvssV3_0 - CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Summary
AttacheCase vulnerable to directory traversal
Details
AttacheCase is an open source file encryption software provided by HiBARA Software. AttacheCase contains a directory traversal vulnerability (CWE-22) due to a flaw in processing filenames in ATC files. Kazuki Furukawa reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000008.html",
  "dc:date": "2017-06-06T16:13+09:00",
  "dcterms:issued": "2017-01-16T14:35+09:00",
  "dcterms:modified": "2017-06-06T16:13+09:00",
  "description": "AttacheCase is an open source file encryption software provided by HiBARA Software. AttacheCase contains a directory traversal vulnerability (CWE-22) due to a flaw in processing filenames in ATC files.\r\n\r\nKazuki Furukawa reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000008.html",
  "sec:cpe": {
    "#text": "cpe:/a:hibara:attachecase",
    "@product": "AttacheCase",
    "@vendor": "HiBARA Software",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "4.3",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
      "@version": "2.0"
    },
    {
      "@score": "3.3",
      "@severity": "Low",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2017-000008",
  "sec:references": [
    {
      "#text": "https://jvn.jp/en/jp/JVN83917769/index.html",
      "@id": "JVN#83917769",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7842",
      "@id": "CVE-2016-7842",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2016-7842",
      "@id": "CVE-2016-7842",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-22",
      "@title": "Path Traversal(CWE-22)"
    }
  ],
  "title": "AttacheCase vulnerable to directory traversal"
}

jvndb-2010-000066
Vulnerability from jvndb
Published
2010-12-17 18:30
Modified
2010-12-17 18:30
Severity ?
() - -
Summary
AttacheCase may insecurely load executable files
Details
AttacheCase may use unsafe methods for determining how to load executables (.exe). AttacheCase is a file encryption/decryption software. AttacheCase loads certain executables (.exe) when decrypting files, if certain settings are applied. AttacheCase contains an issue with the file search path, which may insecurely load executables. Hirotaka Katagiri reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
References
Impacted products
Show details on JVN DB website

To clipboard 

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000066.html",
  "dc:date": "2010-12-17T18:30+09:00",
  "dcterms:issued": "2010-12-17T18:30+09:00",
  "dcterms:modified": "2010-12-17T18:30+09:00",
  "description": "AttacheCase may use unsafe methods for determining how to load executables (.exe).\r\n\r\nAttacheCase is a file encryption/decryption software. AttacheCase loads certain executables (.exe) when decrypting files, if certain settings are applied. AttacheCase contains an issue with the file search path, which may insecurely load executables.\r\n\r\nHirotaka Katagiri reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000066.html",
  "sec:cpe": {
    "#text": "cpe:/a:hibara:attachecase",
    "@product": "AttacheCase",
    "@vendor": "HiBARA Software",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "6.8",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2010-000066",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN02175694/index.html",
      "@id": "JVN#02175694",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3923",
      "@id": "CVE-2010-3923",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-3923",
      "@id": "CVE-2010-3923",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-Other",
      "@title": "No Mapping(CWE-Other)"
    }
  ],
  "title": "AttacheCase may insecurely load executable files"
}