PT-2023-7565 · Iterm2 · Iterm2

Solid-Snail · Publicado 2023-10-21 · Atualizado 2023-10-31 · CVE-2023-46300

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iTerm2 versions prior to 3.4.20

Description The issue is related to the mishandling of certain escape sequences in iTerm2, specifically those related to tmux integration. This can potentially allow a remote attacker to execute arbitrary code due to the lack of proper output encoding or escaping.

Recommendations For versions prior to 3.4.20, update to version 3.4.20 or later to resolve the issue. As a temporary workaround, consider disabling tmux integration until a patch is available. Restrict access to potentially vulnerable escape sequences to minimize the risk of exploitation.

Exploit

Correção

Improper Encoding or Escaping of Output

Enumeração de Fraquezas

CWE-116

Identificadores relacionados

BDU:2023-08621

CVE-2023-46300

Produtos afetados

Iterm2

Referências · 17

• 🔥 https://blog.solidsnail.com/posts/2023-08-28-iterm2-rce · Exploit
• https://github.com/gnachman/iTerm2/commit/ae8192522661c34d1cbe57f6f9ef2ff0a337c2a5 · Correção
• https://github.com/gnachman/iTerm2/commit/b2268b03b5f3d4cd8ca275eaef5d16d0fac20009 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2023-46300 · Nota de Segurança
• https://bdu.fstec.ru/vul/2023-08621 · Nota de Segurança
• https://iterm2.com/news.html · Nota
• https://twitter.com/VulmonFeeds/status/1715964734598443212 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1715939297344594385 · Publicação no Twitter
• https://twitter.com/the_yellow_fall/status/1716294141574029471 · Publicação no Twitter
• https://vuldb.com/?id.243129 · Nota
• https://osv.dev/vulnerability/CVE-2023-46300 · Aviso do Fabricante
• https://twitter.com/fletch_ai/status/1716652482971988259 · Publicação no Twitter
• https://twitter.com/fridaysecurity/status/1716295429455835512 · Publicação no Twitter
• https://t.me/cibsecurity/72741 · Publicação no Telegram
• https://t.me/pentestingnews/40371 · Publicação no Telegram