PT-2017-6257 · Php+1 · Mcrypt+2

Publicado 2017-09-19 · Atualizado 2017-09-28 · CVE-2014-8686

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions CodeIgniter versions prior to 2.2.0

Description The issue makes it easier for attackers to decode session cookies by leveraging fallback to a custom XOR-based encryption scheme when the Mcrypt extension for PHP is not available.

Recommendations For versions prior to 2.2.0, update to version 2.2.0 or later to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2014-8686

Produtos afetados

Codeigniter

Mcrypt

Php

Referências · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/seagate_nas_php_exec_noauth.rb · Exploit
• 🔥 https://exploit-db.com/exploits/36264 · Exploit
• 🔥 https://beyondbinary.io/articles/seagate-nas-rce · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-8686 · Nota de Segurança
• https://dionach.com/blog/codeigniter-session-decoding-vulnerability · Nota
• http://packetstormsecurity.com/files/130609/Seagate-Business-NAS-Unauthenticated-Remote-Command-Execution.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8686 · Nota
• https://codeigniter.com/userguide2/changelog.html · Aviso do Fabricante