PT-2019-19974 · Gns3 · Gns3 Server+1

Published 2019-05-31 · Updated 2021-07-21 · CVE-2020-14976

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions GNS3 ubridge versions 0.9.18 and earlier GNS3 server versions prior to 2.1.17

Description The issue allows a local attacker to read arbitrary files because it handles configuration-file errors by printing the configuration file while executing in a setuid root context.

Recommendations For GNS3 ubridge versions 0.9.18 and earlier, update to a version later than 0.9.18 to resolve the issue. For GNS3 server versions prior to 2.1.17, update to version 2.1.17 or later to resolve the issue.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2020-14976

Affected Products

Gns3 Server

Gns3 Ubridge

References · 8

• 🔥 https://theevilbit.github.io/posts · Exploit
• https://github.com/GNS3/ubridge/commit/2eb0d1dab6a6de76cf3556130a2d52af101077db · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-14976 · Security Note
• https://gns3.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-14976 · Vendor Advisory
• https://github.com/GNS3/gns3-server/releases/tag/v2.1.17 · Note
• https://t.me/cybersecuritytechnologies/271 · Telegram Post
• https://t.me/cvenotify/4603 · Telegram Post