PT-2018-4344 · Freebsd+1 · Freebsd+1

Martin Natano · Publicado 2018-02-05 · Atualizado 2018-04-07 · CVE-2015-1418

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GNU patch versions through 2.7.6 patch in FreeBSD versions prior to 10.1-RELEASE-p17 patch in FreeBSD 10.2 versions prior to 10.2-BETA2-p3 patch in FreeBSD 10.2-RC1 versions prior to 10.2-RC1-p2 patch in FreeBSD 0.2-RC2 versions prior to 10.2-RC2-p1

Description The issue allows remote attackers to execute arbitrary commands via a crafted patch file. This is possible because a '!' character can be passed to the ed program through the do ed script function in pch.c.

Recommendations For GNU patch versions through 2.7.6, update to a version later than 2.7.6. For patch in FreeBSD versions prior to 10.1-RELEASE-p17, update to 10.1-RELEASE-p17 or later. For patch in FreeBSD 10.2 versions prior to 10.2-BETA2-p3, update to 10.2-BETA2-p3 or later. For patch in FreeBSD 10.2-RC1 versions prior to 10.2-RC1-p2, update to 10.2-RC1-p2 or later. For patch in FreeBSD 0.2-RC2 versions prior to 10.2-RC2-p1, update to 10.2-RC2-p1 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-1418

Produtos afetados

Freebsd

Patch

Referências · 7

• http://securitytracker.com/id/1033188 · Nota
• http://rachelbythebay.com/w/2018/04/05/bangpatch · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1418 · Nota de Segurança
• https://freebsd.org/security/advisories/FreeBSD-SA-15:18.bsdpatch.asc · Aviso do Fabricante
• https://ftp.openbsd.org/pub/OpenBSD/patches/5.7/common/013_patch.patch.sig · Nota
• https://bugs.debian.org/894667 · Nota
• http://securityfocus.com/bid/76236 · Nota