PT-2015-4309 · Netsweeper · Netsweeper

Anastasios Monachos + 1 · Published 2015-09-04 · Updated 2019-02-01 · CVE-2014-9605

Positive Technologies (AI Summary)

CVSS v2.0

9.4

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:C

Name of the Vulnerable Software and Affected Versions Netsweeper versions prior to 3.1.10 Netsweeper versions 4.0.x prior to 4.0.9 Netsweeper versions 4.1.x prior to 4.1.2

Description The issue allows remote attackers to bypass authentication and perform certain actions on the server, such as creating a system backup tarball, restarting the server, or stopping the filters. This can be achieved by including a ' (single quote) character in the login and password parameters to the "webupgrade/webupgrade.php" endpoint.

Recommendations For Netsweeper versions prior to 3.1.10, update to version 3.1.10 or later. For Netsweeper versions 4.0.x prior to 4.0.9, update to version 4.0.9 or later. For Netsweeper versions 4.1.x prior to 4.1.2, update to version 4.1.2 or later. As a temporary workaround, consider restricting access to the "webupgrade/webupgrade.php" endpoint until a patch is available. Avoid using the login and password parameters with unvalidated input in the affected endpoint until the issue is resolved.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2014-9605

Affected Products

Netsweeper

References · 6

• 🔥 https://exploit-db.com/exploits/37928 · Exploit
• https://helpdesk.netsweeper.com/docs/4.0/release_notes/netsweeper_releasenotes/4_0_9_release_notes/4.0.9_release_notes.htm · Vendor Advisory
• https://helpdesk.netsweeper.com/docs/3.1/release_notes/netsweeper_releasenotes/3_1_10_0_release_notes/3.1.10_release_notes.htm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-9605 · Security Note
• https://helpdesk.netsweeper.com/docs/4.1/release_notes/netsweeper_releasenotes/4_1_release_notes/4_1_2_release_notes/4.1.2_release_notes.htm · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9605 · Note