PT-2014-4947 · Ruby · Sfpagent

Larry W. Cashdollar + 1 · Published 2014-04-23 · Updated 2017-10-24 · CVE-2014-2888

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions sfpagent gem versions prior to 0.4.15

Description The issue allows remote attackers to execute arbitrary commands via shell metacharacters in the module name in a JSON request. This is possible due to a flaw in the lib/sfpagent/bsig.rb file.

Recommendations For versions prior to 0.4.15, update to version 0.4.15 or later to resolve the issue. As a temporary workaround, consider restricting access to the lib/sfpagent/bsig.rb file to minimize the risk of exploitation. Avoid using the module name in JSON requests that may contain shell metacharacters until the issue is resolved.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2014-2888

GHSA-VM28-MRM7-FPJQ

Affected Products

Sfpagent

References · 9

• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sfpagent/CVE-2014-2888.yml · Exploit
• 🔥 http://vapid.dhs.org/advisories/spfagent-remotecmd.html · Exploit
• 🔥 http://openwall.com/lists/oss-security/2014/04/18/4 · Exploit
• https://osv.dev/vulnerability/GHSA-vm28-mrm7-fpjq · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-2888 · Security Note
• http://seclists.org/fulldisclosure/2014/Apr/243 · Note
• https://web.archive.org/web/20201029141944/http://vapid.dhs.org/advisories/spfagent-remotecmd.html · Note
• https://github.com/herry13/sfpagent · Note
• http://openwall.com/lists/oss-security/2014/04/16/1 · Note