PT-2014-5011 · Unknown · Xcloner Standalone

Published 2014-04-25 · Updated 2018-10-09 · CVE-2014-2996

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions XCloner Standalone versions 3.5 and earlier

Description The issue allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the dbbackup comp parameter in a generate action to "index2.php". It is unclear whether this issue crosses privilege boundaries, as administrators may already have the privileges to execute code. This can be leveraged by remote attackers.

Recommendations For XCloner Standalone versions 3.5 and earlier, consider disabling the dbbackup comp parameter in the generate action to "index2.php" as a temporary workaround until a patch is available. Restrict access to the index2.php file to minimize the risk of exploitation. Avoid using the dbbackup comp parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2014-2996

Affected Products

Xcloner Standalone

References · 6

• 🔥 https://exploit-db.com/exploits/32790 · Exploit
• 🔥 http://exploit-db.com/exploits/32790 · Exploit
• 🔥 https://htbridge.com/advisory/HTB23207 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-2996 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-2996 · Note
• http://securityfocus.com/archive/1/531780/100/0/threaded · Note