PT-2009-1990 · Xitami · Xitami Web Server

Published 2009-03-25 · Updated 2017-08-17 · CVE-2008-6520

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Xitami Web Server versions 2.5c2 and possibly other versions

Description The issue concerns multiple format string vulnerabilities in the SSI filter. These vulnerabilities can be triggered by remote attackers who send a URI that ends in .ssi, .shtm, or .shtml, which contains format string specifiers. This can cause a denial of service (daemon crash) and potentially allow the execution of arbitrary code due to incorrect logging code involving the sendfmt function in the SMT kernel.

Recommendations For Xitami Web Server version 2.5c2, consider disabling the SSI filter to prevent potential exploitation until a patch is available. As a temporary workaround, restrict access to URIs ending in .ssi, .shtm, or .shtml to minimize the risk of triggering the vulnerable logging code. Avoid using format string specifiers in URIs that may trigger the sendfmt function in the SMT kernel until the issue is resolved.

Exploit

Fix

DoS

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2008-6520

Affected Products

Xitami Web Server

References · 5

• 🔥 http://bratax.be/advisories/b013.html · Exploit
• 🔥 http://securityfocus.com/bid/28603 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6520 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41645 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6520 · Note