PT-2014-6429 · Bitdefender · Bitdefender Gravityzone

Published 2014-08-19 · Updated 2014-08-20 · CVE-2014-5350

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bitdefender GravityZone versions prior to 5.1.11.432

Description The issue allows remote attackers to read arbitrary files due to multiple directory traversal vulnerabilities. This can be achieved through the Web Console by using a .. (dot dot) in the id parameter to the "webservice/CORE/downloadFullKitEpc/a/1" endpoint, or by using %2E%2E (encoded dot dot) in the default URI to port 7074 on the Update Server.

Recommendations For versions prior to 5.1.11.432, update to version 5.1.11.432 or later to resolve the issue. As a temporary workaround, consider restricting access to the "webservice/CORE/downloadFullKitEpc/a/1" endpoint and the Update Server on port 7074 to minimize the risk of exploitation. Avoid using the id parameter in the affected endpoint until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2014-5350

Affected Products

Bitdefender Gravityzone

References · 5

• 🔥 https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-3_Bitdefender_GravityZone_Multiple_critical_vulnerabilities_v10.txt · Exploit
• 🔥 https://exploit-db.com/exploits/34086 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2014/Jul/78 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-5350 · Security Note
• http://bitdefender.com/support/how-to-configure-iptables-firewall-rules-on-gravityzone-for-restricting-outside-access-to-mongodatabase-1265.html · Note