PT-2009-6068 · Microsoft+2 · Windows+2

Stephen Fewer · Publicado 2009-11-24 · Atualizado 2017-08-17 · CVE-2009-3843

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Operations Manager version 8.10 on Windows

Description The issue allows remote attackers to conduct unrestricted file upload attacks and execute arbitrary code by utilizing the org.apache.catalina.manager.HTMLManagerServlet class to make requests to "manager/html/upload". This is made possible by a "hidden account" in the XML file that specifies Tomcat users.

Recommendations For HP Operations Manager version 8.10 on Windows, consider disabling the org.apache.catalina.manager.HTMLManagerServlet class as a temporary workaround until a patch is available. Restrict access to the manager/html/upload endpoint to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-3843

Produtos afetados

Apache Tomcat

Hp Operations Manager

Windows

Referências · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_mgr_login.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_deploy.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcat_mgr_upload.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16317 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54361 · Nota
• http://secunia.com/advisories/37444 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=125873415424980&w=2 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-3843 · Nota de Segurança
• http://securitytracker.com/id?1023222 · Nota
• http://osvdb.org/60317 · Nota
• http://zerodayinitiative.com/advisories/ZDI-09-085 · Nota