PT-2017-7559 · George Nachman · Iterm2

Peter Van Dijk · Published 2017-09-20 · Updated 2017-10-05 · CVE-2015-9231

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions iTerm2 versions 3.0.0 through 3.1.1 iTerm2 version 2.9.20150717 and other unreleased 2.9.x versions

Description The issue allows remote attackers to discover passwords by reading DNS queries. A feature added to iTerm2 version 3.0.0 and some unreleased 2.9.x versions sends text under the cursor or selected text as an unencrypted DNS query to check if it is a URL. This results in a potential information disclosure, where passwords and other sensitive information can be sent in cleartext without the user's awareness.

Recommendations For iTerm2 versions 3.0.0 through 3.1.1, update to version 3.1.1 or later to resolve the issue. For iTerm2 version 2.9.20150717 and other unreleased 2.9.x versions, consider disabling the feature that sends DNS queries for text under the cursor or selected text until a patched version is available.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-9231

Affected Products

Iterm2

References · 9

• 🔥 https://gitlab.com/gnachman/iterm2/issues/6050 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-9231 · Security Note
• https://github.com/gnachman/iTerm2/commit/e4eb1063529deb575b75b396138d41554428d522 · Note
• https://github.com/gnachman/iTerm2/commit/33ccaf61e34ef32ffc9d6b2be5dd218f6bb55f51 · Note
• https://gitlab.com/gnachman/iterm2/issues/3688 · Note
• https://gitlab.com/gnachman/iterm2/wikis/dnslookupissue · Note
• https://news.ycombinator.com/item?id=15286956 · Note
• https://gitlab.com/gnachman/iterm2/issues/5303 · Note
• https://gitlab.com/gnachman/iterm2/issues/6068 · Note