PT-2007-6789 · Firefly · Firefly Media Server

Nnp · Published 2007-11-05 · Updated 2018-10-15 · CVE-2007-5825

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Firefly Media Server versions 0.2.4 and earlier

Description The issue allows remote attackers to execute arbitrary code via a stats method action to "/xml-rpc" with format string specifiers in the username or password portion of base64-encoded data on the "Authorization: Basic" HTTP header line. This is due to a format string vulnerability in the ws addarg function in webserver.c in mt-dappd.

Recommendations For Firefly Media Server versions 0.2.4 and earlier, as a temporary workaround, consider restricting access to the "/xml-rpc" API endpoint until a patch is available. Avoid using format string specifiers in the username or password portion of base64-encoded data on the "Authorization: Basic" HTTP header line. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2007-5825

DSA-1597-1

Affected Products

Firefly Media Server

References · 11

• http://debian.org/security/2008/dsa-1597 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5825 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200712-18.xml · Vendor Advisory
• http://secunia.com/advisories/30661 · Note
• http://securityfocus.com/archive/1/483209/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38243 · Note
• http://securityfocus.com/bid/26310 · Note
• http://secunia.com/advisories/28269 · Note
• http://bugs.gentoo.org/show_bug.cgi?id=200110 · Note
• http://sourceforge.net/project/shownotes.php?group_id=98211&release_id=548679 · Note
• http://securityfocus.com/archive/1/483214/100/0/threaded · Note