PT-2018-5244 · Netgate · Pfsense

Yorick Koster · Publicado 2018-01-03 · Atualizado 2019-05-30 · CVE-2017-1000479

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions pfSense versions 2.4.1 and lower

Description The issue allows for clickjacking attacks in the CSRF error page, resulting in privileged execution of arbitrary code. This occurs because error detection happens before an X-Frame-Options header is set.

Recommendations For pfSense versions 2.4.1 and lower, update to version 2.4.2-RELEASE or later to resolve the issue.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2017-1000479

Produtos afetados

Pfsense

Referências · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/pfsense_clickjacking.rb · Exploit
• 🔥 http://openwall.com/lists/oss-security/2017/11/22/7 · Exploit
• 🔥 https://securify.nl/en/advisory/SFY20171101/clickjacking-vulnerability-in-csrf-error-page-pfsense.html · Exploit
• https://github.com/pfsense/pfsense/commit/386d89b07 · Correção
• https://github.com/opnsense/core/commit/d218b225 · Correção
• https://doc.pfsense.org/index.php/2.4.2_New_Features_and_Changes · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000479 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-1000479 · Aviso do Fabricante
• https://netgate.com/blog/pfsense-2-4-2-release-p1-and-2-3-5-release-p1-now-available.html · Nota