PT-2016-1727 · Xymon+1 · Xymon+1

Jccleaver · Publicado 2016-02-26 · Atualizado 2018-10-09 · CVE-2016-2056

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Xymon versions 4.1.x through 4.3.x before 4.3.25

Description The issue is related to the lack of input sanitization in the xymond component of the Xymon network monitoring tool. This allows a remote authenticated user to execute arbitrary commands by using shell metacharacters in the adduser name argument in either web/useradm.c or web/chpasswd.c.

Recommendations For Xymon versions 4.1.x through 4.3.x before 4.3.25, update to version 4.3.25 or later to resolve the issue.

Exploit

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

ALT-PU-2016-1161

BDU:2016-01053

CVE-2016-2056

DLA-488-1

DSA-3495-1

MGASA-2016-0177

Produtos afetados

Alt Linux

Xymon

Referências · 23

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/xymon_useradm_cmd_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/47114 · Exploit
• https://osv.dev/vulnerability/CVE-2016-2056 · Aviso do Fabricante
• http://packetstormsecurity.com/files/135758/Xymon-4.3.x-Buffer-Overflow-Code-Execution-Information-Disclosure.html · Nota
• https://xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.8 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-2056 · Nota de Segurança
• http://securityfocus.com/archive/1/537522/100/0/threaded · Nota
• http://debian.org/security/2016/dsa-3495 · Aviso do Fabricante
• http://lists.xymon.com/pipermail/xymon/2016-February/042986.html · Nota
• https://sourceforge.net/p/xymon/code/7892 · Correção
• http://packetstormsecurity.com/files/153620/Xymon-useradm-Command-Execution.html · Nota
• https://debian.org/security/2016/dsa-3495 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-2056 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-2056 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2016-2056 · Nota de Segurança