PT-2018-17116 · Heimdal · Heimdal Pro

Publicado 2018-03-22 · Atualizado 2018-04-20 · CVE-2018-5731

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Heimdal PRO version 2.2.190

Description: An issue in Heimdal PRO allows an attacker to exploit a vulnerability related to the scanning feature. The md.hs process writes an executable called CS1.tmp to C:windowsTEMP and then runs it. An attacker can create the file first, let md.hs overwrite it, and then rewrite the file between the time md.hs closes and executes it, potentially using opportunistic locks and a high priority thread. This issue is triggered when a scan starts.

Recommendations: For Heimdal PRO version 2.2.190, as a temporary workaround, consider restricting access to the C:windowsTEMP directory to minimize the risk of exploitation. Additionally, avoid starting scans until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-5731

Produtos afetados

Heimdal Pro

Referências · 3

• 🔥 https://improsec.com/blog/heimdal-advisory-2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-5731 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-5731 · Aviso do Fabricante