PT-2018-6398 · Gps Server.Net · Gps-Server.Net Gps Tracking

Noman Riffat · Published 2018-01-02 · Updated 2018-01-18 · CVE-2017-17097

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: gps-server.net GPS Tracking Software (self hosted) versions 2.x

Description: The issue concerns a password reset procedure that allows immediate password resets upon an unauthenticated request. After the reset, an email is sent with a new, predictable password based on the date, making it easier for remote attackers to gain access by predicting this password. This is due to the use of gmdate for password creation in the fn connect.php file.

Recommendations: For gps-server.net GPS Tracking Software (self hosted) versions 2.x, consider modifying the password reset procedure to generate unpredictable passwords and implement additional authentication steps to prevent unauthorized resets. As a temporary workaround, restrict access to the password reset functionality until a more secure solution is implemented.

Exploit

Fix

Weakness Enumeration

CWE-640

Related Identifiers

CVE-2017-17097

Affected Products

Gps-Server.Net Gps Tracking

References · 5

• 🔥 https://exploit-db.com/exploits/43431 · Exploit
• https://osv.dev/vulnerability/CVE-2017-17097 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-17097 · Security Note
• https://gist.github.com/pak0s/ea7a80c2614d9cd43cfb8230c65c9fec · Patch
• https://s1.gps-server.net/changelog.txt · Vendor Advisory