PT-2020-12553 · Apache Friends · Xampp

Maximilian Barz · Published 2020-04-02 · Updated 2021-10-18 · CVE-2020-11107

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions XAMPP versions prior to 7.2.29 XAMPP versions 7.3.x prior to 7.3.16 XAMPP versions 7.4.x prior to 7.4.4

Description An issue was discovered in XAMPP on Windows, allowing an unprivileged user to change a .exe configuration in xampp-contol.ini for all users, including admins, to enable arbitrary command execution.

Recommendations For XAMPP versions prior to 7.2.29, update to version 7.2.29 or later. For XAMPP versions 7.3.x prior to 7.3.16, update to version 7.3.16 or later. For XAMPP versions 7.4.x prior to 7.4.4, update to version 7.4.4 or later. As a temporary workaround, consider restricting access to the xampp-contol.ini file to prevent unprivileged users from modifying the .exe configuration.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2020-11107

Affected Products

Xampp

References · 9

• 🔥 https://github.com/S1lkys/CVE-2020-11107 · Exploit
• 🔥 https://github.com/andripwn/CVE-2020-11107 · Exploit
• 🔥 https://exploit-db.com/exploits/50337 · Exploit
• 🔥 http://packetstormsecurity.com/files/164292/XAMPP-7.4.3-Privilege-Escalation.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-11107 · Security Note
• https://apachefriends.org/blog/new_xampp_20200401.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-11107 · Vendor Advisory
• https://t.me/defcon_news/85991 · Telegram Post
• https://t.me/cvenotify/2370 · Telegram Post