PT-2014-4947 · Ruby · Sfpagent

Larry W. Cashdollar + 1 · Publicado 2014-04-23 · Atualizado 2017-10-24 · CVE-2014-2888

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions sfpagent gem versions prior to 0.4.15

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the module name in a JSON request. This is possible due to a flaw in the lib/sfpagent/bsig.rb file.

Recommendations For versions prior to 0.4.15, update to version 0.4.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the lib/sfpagent/bsig.rb file to minimize the risk of exploitation. Avoid using the module name in JSON requests that may contain shell metacharacters until the issue is resolved.

Exploit

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

CVE-2014-2888

GHSA-VM28-MRM7-FPJQ

Produtos afetados

Sfpagent

Referências · 9

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sfpagent/CVE-2014-2888.yml · Exploit
• 🔥 http://vapid.dhs.org/advisories/spfagent-remotecmd.html · Exploit
• 🔥 http://openwall.com/lists/oss-security/2014/04/18/4 · Exploit
• http://seclists.org/fulldisclosure/2014/Apr/243 · Nota
• https://web.archive.org/web/20201029141944/http://vapid.dhs.org/advisories/spfagent-remotecmd.html · Nota
• https://osv.dev/vulnerability/GHSA-vm28-mrm7-fpjq · Aviso do Fabricante
• https://github.com/herry13/sfpagent · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2888 · Nota de Segurança
• http://openwall.com/lists/oss-security/2014/04/16/1 · Nota