PT-2014-6429 · Bitdefender · Bitdefender Gravityzone

Publicado 2014-08-19 · Atualizado 2014-08-20 · CVE-2014-5350

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bitdefender GravityZone versions prior to 5.1.11.432

Description The issue allows remote attackers to read arbitrary files due to multiple directory traversal vulnerabilities. This can be achieved through the Web Console by using a .. (dot dot) in the id parameter to the "webservice/CORE/downloadFullKitEpc/a/1" endpoint, or by using %2E%2E (encoded dot dot) in the default URI to port 7074 on the Update Server.

Recommendations For versions prior to 5.1.11.432, update to version 5.1.11.432 or later to resolve the issue. As a temporary workaround, consider restricting access to the "webservice/CORE/downloadFullKitEpc/a/1" endpoint and the Update Server on port 7074 to minimize the risk of exploitation. Avoid using the id parameter in the affected endpoint until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2014-5350

Produtos afetados

Bitdefender Gravityzone

Referências · 5

• 🔥 https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-3_Bitdefender_GravityZone_Multiple_critical_vulnerabilities_v10.txt · Exploit
• 🔥 https://exploit-db.com/exploits/34086 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2014/Jul/78 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-5350 · Nota de Segurança
• http://bitdefender.com/support/how-to-configure-iptables-firewall-rules-on-gravityzone-for-restricting-outside-access-to-mongodatabase-1265.html · Nota