PT-2009-3666 · Hannon Hill+1 · Hannon Hill Cascade Server+1

Published 2009-03-25 · Updated 2018-10-10 · CVE-2009-1088

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hannon Hill Cascade Server version 5.7 and other versions

Description The issue allows remote authenticated users to execute arbitrary programs or Java code. This is achieved by using a crafted XSLT stylesheet that includes extension elements and extension functions, which trigger code execution by Xalan-Java. An example of exploitation is demonstrated using xalan://java.lang.Runtime.

Recommendations For Hannon Hill Cascade Server version 5.7 and other affected versions, consider restricting access to XSLT stylesheets to prevent the execution of arbitrary code until a patch is available. As a temporary workaround, disabling the use of extension elements and extension functions in XSLT stylesheets may help minimize the risk of exploitation.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2009-1088

Affected Products

Hannon Hill Cascade Server

Xalan-Java

References · 6

• 🔥 https://exploit-db.com/exploits/8247 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-1088 · Security Note
• http://securityfocus.com/bid/34186 · Note
• http://securityfocus.com/archive/1/501981/100/0/threaded · Note
• http://support.hannonhill.com/browse/CSCD-4753 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49332 · Note