PT-2020-12785 · Titanhq · Spamtitan

Felipe Molina · Published 2020-09-17 · Updated 2022-04-28 · CVE-2020-11698

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SpamTitan version 7.07

Description An issue was discovered in SpamTitan where improper input sanitization of the parameter community on the page "snmp-x.php" would allow a remote attacker to inject commands into the file "snmpd.conf", enabling the execution of commands on the target server.

Recommendations For SpamTitan version 7.07, ensure proper input sanitization of the community parameter in the "snmp-x.php" page to prevent command injection. As a temporary workaround, consider restricting access to the "snmp-x.php" page until a fix is available.

Exploit

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2020-11698

Affected Products

Spamtitan

References · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/freebsd/webapp/spamtitan_unauth_rce.rb · Exploit
• 🔥 https://exploit-db.com/exploits/48856 · Exploit
• 🔥 http://packetstormsecurity.com/files/160809/SpamTitan-7.07-Command-Injection.html · Exploit
• 🔥 https://sensepost.com/blog/2020/clash-of-the-spamtitan · Exploit
• 🔥 http://packetstormsecurity.com/files/159470/SpamTitan-7.07-Remote-Code-Execution.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-11698 · Security Note
• https://spamtitan.com · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-11698 · Vendor Advisory
• https://twitter.com/felmoltor · Note
• https://github.com/felmoltor · Note