PT-2014-5011 · Unknown · Xcloner Standalone

Publicado 2014-04-25 · Atualizado 2018-10-09 · CVE-2014-2996

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions XCloner Standalone versions 3.5 and earlier

Description The issue allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the dbbackup comp parameter in a generate action to "index2.php". It is unclear whether this issue crosses privilege boundaries, as administrators may already have the privileges to execute code. This can be leveraged by remote attackers.

Recommendations For XCloner Standalone versions 3.5 and earlier, consider disabling the dbbackup comp parameter in the generate action to "index2.php" as a temporary workaround until a patch is available. Restrict access to the index2.php file to minimize the risk of exploitation. Avoid using the dbbackup comp parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2014-2996

Produtos afetados

Xcloner Standalone

Referências · 6

• 🔥 https://exploit-db.com/exploits/32790 · Exploit
• 🔥 http://exploit-db.com/exploits/32790 · Exploit
• 🔥 https://htbridge.com/advisory/HTB23207 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2996 · Nota
• http://securityfocus.com/archive/1/531780/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-2996 · Nota de Segurança