PT-2019-15185 · Sagemath · Sagemath Sage Cell Server

Published 2019-10-18 · Updated 2024-08-05 · CVE-2019-17526

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SageMath Sage Cell Server versions prior to 2019-10-05

Description An issue in SageMath Sage Cell Server allows Python Code Injection, enabling malicious actors to execute arbitrary commands on the underlying operating system. This can be achieved through an internet-facing web application. For example, using the import ('os').popen('whoami').read() line, attackers can execute system commands. The vendor acknowledges this behavior as "vulnerable by design" and intends to retain it.

Recommendations For versions prior to 2019-10-05, consider restricting access to the Sage Cell Server to minimize the risk of exploitation, as the vendor does not plan to change the current behavior. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Code Injection

OS Command Injection

Weakness Enumeration

CWE-94

CWE-78

Related Identifiers

CVE-2019-17526

Affected Products

Sagemath Sage Cell Server

References · 5

• 🔥 https://sethsec.blogspot.com/2016/11/exploiting-python-code-injection-in-web.html · Exploit
• 🔥 https://gist.github.com/barrett092/0380a1c34c014e29b827d1f408381525 · Exploit
• https://github.com/sagemath/sagecell/commits/master · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2019-17526 · Security Note
• https://osv.dev/vulnerability/CVE-2019-17526 · Vendor Advisory