PT-2018-4344 · Freebsd+1 · Freebsd+1

Martin Natano · Published 2018-02-05 · Updated 2018-04-07 · CVE-2015-1418

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions GNU patch versions through 2.7.6 patch in FreeBSD versions prior to 10.1-RELEASE-p17 patch in FreeBSD 10.2 versions prior to 10.2-BETA2-p3 patch in FreeBSD 10.2-RC1 versions prior to 10.2-RC1-p2 patch in FreeBSD 0.2-RC2 versions prior to 10.2-RC2-p1

Description The issue allows remote attackers to execute arbitrary commands via a crafted patch file. This is possible because a '!' character can be passed to the ed program through the do ed script function in pch.c.

Recommendations For GNU patch versions through 2.7.6, update to a version later than 2.7.6. For patch in FreeBSD versions prior to 10.1-RELEASE-p17, update to 10.1-RELEASE-p17 or later. For patch in FreeBSD 10.2 versions prior to 10.2-BETA2-p3, update to 10.2-BETA2-p3 or later. For patch in FreeBSD 10.2-RC1 versions prior to 10.2-RC1-p2, update to 10.2-RC1-p2 or later. For patch in FreeBSD 0.2-RC2 versions prior to 10.2-RC2-p1, update to 10.2-RC2-p1 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-1418

Affected Products

Freebsd

Patch

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2015-1418 · Security Note
• https://freebsd.org/security/advisories/FreeBSD-SA-15:18.bsdpatch.asc · Vendor Advisory
• http://securitytracker.com/id/1033188 · Note
• http://rachelbythebay.com/w/2018/04/05/bangpatch · Note
• https://ftp.openbsd.org/pub/OpenBSD/patches/5.7/common/013_patch.patch.sig · Note
• https://bugs.debian.org/894667 · Note
• http://securityfocus.com/bid/76236 · Note