Back to CVE Browser

CVE-2013-6795

CRITICAL

9.3

CVSS Severity Score

EPSS Score0.0490%

EPSS Percentile7.62th

PublishedDec 24, 2013

Last ModifiedApr 29, 2026

Vulnerability Description

The Updater in Rackspace Openstack Windows Guest Agent for XenServer before 1.2.6.0 allows remote attackers to execute arbitrary code via a crafted serialized .NET object to TCP port 1984, which triggers the download and extraction of a ZIP file that overwrites the Agent service binary.

Affected Platforms (CPE)

📦

Rackspace

Openstack Windows Guest Agent

<= 1.2.5.0

References & Advisories

🔗 http://archives.neohapsis.com/archives/bugtraq/2013-11/0122.html

🔗 http://blog.cloudpassage.com/2013/11/18/cve-2013-6795-vulnerability-rackspace-windows-agent-updater/

🔗 http://osvdb.org/100191

🔗 http://packetstormsecurity.com/files/124153/Rackspace-Windows-Agent-Updater-Arbitrary-Code-Execution.html

🔗 http://secunia.com/advisories/55775

🔗 https://github.com/rackerlabs/openstack-guest-agents-windows-xenserver/commit/ef16f88f20254b8083e361f11707da25f8482401

🔗 https://github.com/rackerlabs/openstack-guest-agents-windows-xenserver/releases/tag/1.2.6.0

🔗 http://archives.neohapsis.com/archives/bugtraq/2013-11/0122.html

Related Vulnerabilities

CVE-2013-136910.0

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x befo...

CVE-2013-273310.0

Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to exec...

CVE-2013-007310.0

The Windows Forms (aka WinForms) component in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly restrict ...

CVE-2013-137010.0

Buffer overflow in Adobe Flash Player before 10.3.183.63 and 11.x before 11.6.602.168 on Windows, before 10.3.183.61 and 11.x befo...