PT-2018-11141 · Simple Password Store+1 · Pass+1

Marcus Brinkmann · Publicado 2018-06-15 · Atualizado 2021-07-03 · CVE-2018-12356

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions pass versions 1.7.x through 1.7.1

Description An issue in the password-store.sh script of Simple Password Store allows remote attackers to spoof file signatures on configuration files and extension scripts due to an incomplete regular expression in the signature verification routine. This can lead to the disclosure of passwords if an attacker modifies the configuration file to inject additional encryption keys. Furthermore, modifying the extension scripts can allow the attacker to execute arbitrary code.

Recommendations For pass versions 1.7.x through 1.7.1, update to version 1.7.2 or later to resolve the issue.

Correção

Improper Verification of Cryptographic Signature

Enumeração de Fraquezas

CWE-347

Identificadores relacionados

ALT-PU-2021-2135

CVE-2018-12356

OPENSUSE-SU-2024:11150-1

Produtos afetados

Alt Linux

Pass

Referências · 16

• https://github.com/RUB-NDS/Johnny-You-Are-Fired · Nota
• https://github.com/RUB-NDS/Johnny-You-Are-Fired/blob/master/paper/johnny-fired.pdf · Nota
• https://ubuntu.com/security/CVE-2018-12356 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2019/04/30/4 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-12356 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2018/06/14/3 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-12356 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2018-12356 · Nota de Segurança
• https://neopg.io/blog/pass-signature-spoof · Nota
• https://git.zx2c4.com/password-store/commit/?id=8683403b77f59c56fcb1f05c61ab33b9fd61a30d · Correção
• http://seclists.org/fulldisclosure/2019/Apr/38 · Nota
• http://packetstormsecurity.com/files/152703/Johnny-You-Are-Fired.html · Nota
• https://security-tracker.debian.org/tracker/CVE-2018-12356 · Aviso do Fabricante
• https://lists.zx2c4.com/pipermail/password-store/2018-June/003308.html · Nota
• https://osv.dev/vulnerability/CVE-2018-12356 · Aviso do Fabricante