PT-2014-4331 · Jetro · Jetro Cockpit Secure Browsing

Publicado 2014-02-18 · Atualizado 2014-02-21 · CVE-2014-1861

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Jetro COCKPIT Secure Browsing (JCSB) versions 4.3.1 through 4.3.3

Description The issue concerns the client in Jetro COCKPIT Secure Browsing (JCSB) that fails to validate the FileName element in an RDP FILE TRANSFER document. This allows remote JCSB servers to execute arbitrary programs by providing a .EXE extension.

Recommendations For Jetro COCKPIT Secure Browsing (JCSB) versions 4.3.1 through 4.3.3, consider disabling the handling of RDP FILE TRANSFER documents until a patch is available to prevent remote execution of arbitrary programs.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2014-1861

Produtos afetados

Jetro Cockpit Secure Browsing

Referências · 3

• http://blog.quaji.com/2014/02/remote-code-execution-on-all-enterprise.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-1861 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2014-02/0075.html · Nota