PT-2018-7254 · Midnight Coders · Weborb For Java

Publicado 2018-06-11 · Atualizado 2019-10-09 · CVE-2017-3207

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: WebORB for Java version 5.1.1.0

Description: The issue concerns the Java implementations of AMF3 deserializers in WebORB for Java, which derive class instances from java.io.Externalizable instead of following the AMF3 specification's recommendation of flash.utils.IExternalizable. This could allow a remote attacker, who has the ability to spoof or control an RMI server connection, to send serialized Java objects that execute arbitrary code when deserialized.

Recommendations: For WebORB for Java version 5.1.1.0, consider updating to a version that adheres to the AMF3 specification's recommendation for deserialization, or apply a patch if available, to prevent arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Deserialization of Untrusted Data

Enumeração de Fraquezas

CWE-502

Identificadores relacionados

CVE-2017-3207

Produtos afetados

Weborb For Java

Referências · 6

• 🔥 https://codewhitesec.blogspot.com/2017/04/amf.html · Exploit
• http://securityweek.com/flaws-java-amf-libraries-allow-remote-code-execution · Nota
• https://osv.dev/vulnerability/CVE-2017-3207 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-3207 · Nota de Segurança
• http://securityfocus.com/bid/97384 · Nota
• https://kb.cert.org/vuls/id/307983 · Nota