PT-2009-1990 · Xitami · Xitami Web Server

Publicado 2009-03-25 · Atualizado 2017-08-17 · CVE-2008-6520

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xitami Web Server versions 2.5c2 and possibly other versions

Description The issue concerns multiple format string vulnerabilities in the SSI filter. These vulnerabilities can be triggered by remote attackers who send a URI that ends in .ssi, .shtm, or .shtml, which contains format string specifiers. This can cause a denial of service (daemon crash) and potentially allow the execution of arbitrary code due to incorrect logging code involving the sendfmt function in the SMT kernel.

Recommendations For Xitami Web Server version 2.5c2, consider disabling the SSI filter to prevent potential exploitation until a patch is available. As a temporary workaround, restrict access to URIs ending in .ssi, .shtm, or .shtml to minimize the risk of triggering the vulnerable logging code. Avoid using format string specifiers in URIs that may trigger the sendfmt function in the SMT kernel until the issue is resolved.

Exploit

Correção

DoS

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2008-6520

Produtos afetados

Xitami Web Server

Referências · 5

• 🔥 http://bratax.be/advisories/b013.html · Exploit
• 🔥 http://securityfocus.com/bid/28603 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41645 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-6520 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6520 · Nota