PT-2010-1458 · Accellion · Accellion Secure File Transfer Appliance

Publicado 2010-02-19 · Atualizado 2017-08-17 · CVE-2009-4648

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Accellion Secure File Transfer Appliance versions prior to 8 0 105

Description The issue allows local administrators to gain privileges due to improper restriction of access to sensitive commands and arguments that run with extra sudo privileges. This can be achieved through arbitrary arguments in the --file move action in /usr/local/bin/admin.pl, or a hard link attack in chmod or a certain cp command.

Recommendations For Accellion Secure File Transfer Appliance versions prior to 8 0 105, update to version 8 0 105 or later to resolve the issue. As a temporary workaround, consider restricting access to the /usr/local/bin/admin.pl script and limiting the use of chmod and cp commands to minimize the risk of exploitation.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-4648

Produtos afetados

Accellion Secure File Transfer Appliance

Referências · 6

• 🔥 http://securityfocus.com/bid/38176 · Exploit
• 🔥 http://portcullis-security.com/338.php · Exploit
• 🔥 https://exploit-db.com/exploits/33623 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4648 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56248 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-4648 · Nota de Segurança