PT-2016-3276 · Apache+3 · Apache Commons Fileupload+4

CVE-2016-1000031 · Publicado 2016-10-17 · Atualizado 2024-05-27

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apache Commons FileUpload versions prior to 1.3.3

Description The issue is related to the deserialization mechanism in the DiskFileItem class of the Apache Commons FileUpload library. It allows a remote attacker to execute arbitrary code or manipulate files in the target system using specially crafted data. The vulnerability can be exploited by sending a specially formed Java Object, enabling the attacker to write or copy files to arbitrary disk locations and execute arbitrary code.

Recommendations For versions prior to 1.3.3, update to version 1.3.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the DiskFileItem class until a patch is available.

Correção

RCE

Improper Access Control

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-284

CWE-502

Identificadores relacionados

ALT-PU-2017-3595

BDU:2018-01429

CVE-2016-1000031

GHSA-7X9J-7223-RG5M

OPENSUSE-SU-2019:1399-1

OPENSUSE-SU-2019_1399-1

SUSE-SU-2019:1212-1

SUSE-SU-2019:1212-2

SUSE-SU-2019:1214-1

SUSE-SU-2019:14044-1

SUSE-SU-2019_1212-1

SUSE-SU-2019_1212-2

SUSE-SU-2019_1214-1

SUSE-SU-2019_14044-1

ZDI-16-570

Produtos afetados

Alt Linux

Apache Commons Fileupload

Apache Struts

Debian

Suse

Referências · 64

• https://zerodayinitiative.com/advisories/ZDI-16-570 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2016-1000031 · Aviso do Fabricante
• https://lists.opensuse.org/archives/list/[e-mail]/thread/LLTXNSZ2EZZYRNHUZYDN67SU2IBOUXXZ · Nota
• https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451%40%3Csolr-user.lucene.apache.org%3E · Nota
• https://oracle.com/technetwork/security-advisory/cpujan2019-5072801.html · Nota
• https://ubuntu.com/security/CVE-2016-1000031 · Aviso do Fabricante
• https://oracle.com/security-alerts/cpujan2020.html · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2019:1399-1 · Aviso do Fabricante
• https://lists.suse.com/pipermail/sle-security-updates/2019-October/006004.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-1000031 · Nota de Segurança
• https://osv.dev/vulnerability/SUSE-SU-2019:14044-1 · Aviso do Fabricante
• https://oracle.com/security-alerts/cpuoct2021.html · Nota
• https://osv.dev/vulnerability/GHSA-7x9j-7223-rg5m · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1000031 · Nota de Segurança
• https://tenable.com/security/research/tra-2016-23 · Nota