PT-2017-2932 · Kaspersky · Kaspersky Anti-Virus For Linux File Server

Leandro Barragan + 1 · Published 2017-04-03 · Updated 2017-08-12 · CVE-2017-9812

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Kaspersky Anti-Virus for Linux File Server versions prior to 8.0.4.312

Description The issue is related to the reportId parameter of the getReportStatus action method in the web interface, which can be exploited to read arbitrary files with kluser privileges. This is due to a lack of protection for service data. The exploitation of this issue may allow a remote attacker to read arbitrary files.

Recommendations For versions prior to 8.0.4.312, update to version 8.0.4.312 or later to resolve the issue. As a temporary workaround, consider restricting access to the getReportStatus action method to minimize the risk of exploitation. Avoid using the reportId parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2017-02257

CVE-2017-9812

Affected Products

Kaspersky Anti-Virus For Linux File Server

References · 9

• 🔥 https://coresecurity.com/advisories/kaspersky-anti-virus-file-server-multiple-vulnerabilities · Exploit
• 🔥 http://packetstormsecurity.com/files/143190/Kaspersky-Anti-Virus-File-Server-8.0.3.297-XSS-CSRF-Code-Execution.html · Exploit
• 🔥 https://exploit-db.com/exploits/42269 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2017/Jun/33 · Exploit
• https://osv.dev/vulnerability/CVE-2017-9812 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-02257 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-9812 · Security Note
• http://securitytracker.com/id/1038798 · Note
• http://securityfocus.com/bid/99330 · Note