PT-2018-18854 · Nordvpn+1 · Nordvpn+1

Benjamin Watson + 1 · Publicado 2018-03-27 · Atualizado 2020-05-11 · CVE-2018-9105

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NordVPN version 3.3.10 for macOS

Description The issue arises from the privileged helper tool's implemented XPC service, which is responsible for receiving and processing new OpenVPN connection requests. This XPC service is not protected, allowing arbitrary applications to connect and send XPC messages. An attacker can send a crafted XPC message to the privileged helper tool, requesting a new OpenVPN connection and specifying the location of the openvpn executable, potentially pointing to a malicious executable. This could result in code execution in the context of the privileged helper tool.

Recommendations For NordVPN version 3.3.10 for macOS, consider disabling the XPC service of the privileged helper tool until a patch is available to prevent arbitrary applications from sending XPC messages. Restrict access to the OpenVPN connection requests to minimize the risk of exploitation. Avoid using the vulnerable XPC service in the privileged helper tool until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2018-9105

Produtos afetados

Nordvpn

Openvpn

Referências · 4

• https://github.com/VerSprite/research/blob/master/advisories/VS-2018-015.md · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/140939 · Nota
• https://osv.dev/vulnerability/CVE-2018-9105 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-9105 · Nota de Segurança