PT-2018-17116 · Heimdal · Heimdal Pro

Published 2018-03-22 · Updated 2018-04-20 · CVE-2018-5731

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Heimdal PRO version 2.2.190

Description: An issue in Heimdal PRO allows an attacker to exploit a vulnerability related to the scanning feature. The md.hs process writes an executable called CS1.tmp to C:windowsTEMP and then runs it. An attacker can create the file first, let md.hs overwrite it, and then rewrite the file between the time md.hs closes and executes it, potentially using opportunistic locks and a high priority thread. This issue is triggered when a scan starts.

Recommendations: For Heimdal PRO version 2.2.190, as a temporary workaround, consider restricting access to the C:windowsTEMP directory to minimize the risk of exploitation. Additionally, avoid starting scans until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-5731

Affected Products

Heimdal Pro

References · 3

• 🔥 https://improsec.com/blog/heimdal-advisory-2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-5731 · Security Note
• https://osv.dev/vulnerability/CVE-2018-5731 · Vendor Advisory