PT-2014-4331 · Jetro · Jetro Cockpit Secure Browsing

Published 2014-02-18 · Updated 2014-02-21 · CVE-2014-1861

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Jetro COCKPIT Secure Browsing (JCSB) versions 4.3.1 through 4.3.3

Description The issue concerns the client in Jetro COCKPIT Secure Browsing (JCSB) that fails to validate the FileName element in an RDP FILE TRANSFER document. This allows remote JCSB servers to execute arbitrary programs by providing a .EXE extension.

Recommendations For Jetro COCKPIT Secure Browsing (JCSB) versions 4.3.1 through 4.3.3, consider disabling the handling of RDP FILE TRANSFER documents until a patch is available to prevent remote execution of arbitrary programs.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2014-1861

Affected Products

Jetro Cockpit Secure Browsing

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-1861 · Security Note
• http://blog.quaji.com/2014/02/remote-code-execution-on-all-enterprise.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2014-02/0075.html · Note