PT-2017-2932 · Kaspersky · Kaspersky Anti-Virus For Linux File Server

Leandro Barragan + 1 · Publicado 2017-04-03 · Atualizado 2017-08-12 · CVE-2017-9812

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus for Linux File Server versions prior to 8.0.4.312

Description The issue is related to the reportId parameter of the getReportStatus action method in the web interface, which can be exploited to read arbitrary files with kluser privileges. This is due to a lack of protection for service data. The exploitation of this issue may allow a remote attacker to read arbitrary files.

Recommendations For versions prior to 8.0.4.312, update to version 8.0.4.312 or later to resolve the issue. As a temporary workaround, consider restricting access to the getReportStatus action method to minimize the risk of exploitation. Avoid using the reportId parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2017-02257

CVE-2017-9812

Produtos afetados

Kaspersky Anti-Virus For Linux File Server

Referências · 9

• 🔥 https://coresecurity.com/advisories/kaspersky-anti-virus-file-server-multiple-vulnerabilities · Exploit
• 🔥 http://packetstormsecurity.com/files/143190/Kaspersky-Anti-Virus-File-Server-8.0.3.297-XSS-CSRF-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/42269 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2017/Jun/33 · Exploit
• https://osv.dev/vulnerability/CVE-2017-9812 · Aviso do Fabricante
• http://securitytracker.com/id/1038798 · Nota
• http://securityfocus.com/bid/99330 · Nota
• https://bdu.fstec.ru/vul/2017-02257 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-9812 · Nota de Segurança