PT-2014-5079 · Ibm · Ibm Sametime Meeting Server

Publicado 2014-07-01 · Atualizado 2017-01-07 · CVE-2014-3088

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Sametime Meeting Server version 8.5.1

Description The issue allows remote authenticated users to bypass intended upload restrictions. This is achieved by modifying the Content-Type header and file extension in wAttach?OpenForm multipart/form-data POST requests, which are not properly validated by the server. For example, an attacker could replace a text/plain .txt upload with an application/octet-stream .exe upload.

Recommendations For IBM Sametime Meeting Server version 8.5.1, consider validating file formats on the server-side to prevent bypassing of upload restrictions. As a temporary workaround, restrict access to the stconf.nsf file and the wAttach?OpenForm endpoint to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-3088

Produtos afetados

Ibm Sametime Meeting Server

Referências · 5

• http://linux.oracle.com/errata/ELSA-2014-0747.html · Nota
• http://securityfocus.com/bid/68291 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-3088 · Nota de Segurança
• http://packetstormsecurity.com/files/127829/IBM-Sametime-Meet-Server-8.5-Arbitrary-File-Upload.html · Nota
• http://packetstormsecurity.com/files/127294 · Nota