PT-2009-3666 · Hannon Hill+1 · Hannon Hill Cascade Server+1

Publicado 2009-03-25 · Atualizado 2018-10-10 · CVE-2009-1088

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hannon Hill Cascade Server version 5.7 and other versions

Description The issue allows remote authenticated users to execute arbitrary programs or Java code. This is achieved by using a crafted XSLT stylesheet that includes extension elements and extension functions, which trigger code execution by Xalan-Java. An example of exploitation is demonstrated using xalan://java.lang.Runtime.

Recommendations For Hannon Hill Cascade Server version 5.7 and other affected versions, consider restricting access to XSLT stylesheets to prevent the execution of arbitrary code until a patch is available. As a temporary workaround, disabling the use of extension elements and extension functions in XSLT stylesheets may help minimize the risk of exploitation.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2009-1088

Produtos afetados

Hannon Hill Cascade Server

Xalan-Java

Referências · 6

• 🔥 https://exploit-db.com/exploits/8247 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1088 · Nota de Segurança
• http://securityfocus.com/bid/34186 · Nota
• http://securityfocus.com/archive/1/501981/100/0/threaded · Nota
• http://support.hannonhill.com/browse/CSCD-4753 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49332 · Nota