PT-2014-2406 · Apache+1 · Apache Cordova+1

Publicado 2014-03-03 · Atualizado 2014-03-03 · CVE-2012-6637

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache Cordova versions 3.3.0 and earlier Adobe PhoneGap versions 2.9.0 and earlier

Description The issue allows remote attackers to bypass a whitelist protection mechanism. This is achieved via a domain name that contains an acceptable name as an initial substring, due to the failure to anchor the end of domain-name regular expressions.

Recommendations For Apache Cordova versions 3.3.0 and earlier, update to a version that properly anchors the end of domain-name regular expressions. For Adobe PhoneGap versions 2.9.0 and earlier, update to a version that properly anchors the end of domain-name regular expressions.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-6637

Produtos afetados

Phonegap

Apache Cordova

Referências · 7

• 🔥 http://cs.utexas.edu/~shmat/shmat_ndss14nofrak.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-6637 · Nota de Segurança
• http://openwall.com/lists/oss-security/2014/02/07/9 · Nota
• http://labs.mwrinfosecurity.com/blog/2012/04/30/building-android-javajavascript-bridges · Nota
• http://packetstormsecurity.com/files/124954/apachecordovaphonegap-bypass.txt · Nota
• http://internetsociety.org/ndss2014/programme#session3 · Nota
• http://seclists.org/bugtraq/2014/Jan/96 · Correção