PT-2020-5768 · Yaws+1 · Yaws+1

Published 2020-08-28 · Updated 2022-12-06 · CVE-2020-24916

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Yaws versions 1.81 through 2.0.7

Description: The issue is related to the CGI implementation in the Yaws web server, which is associated with incorrect cleaning of CGI requests. This can allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. The vulnerability is also described as being susceptible to OS command injection.

Recommendations: For Yaws versions 1.81 through 2.0.7, update to a version that includes a fix for the CGI implementation issue to prevent OS command injection and ensure proper cleaning of CGI requests. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2021-01727

CVE-2020-24916

DLA-2384-1

DSA-4773-1

USN-4569-1

Affected Products

Ubuntu

Yaws

References · 22

• 🔥 https://github.com/vulnbe/poc-yaws-cgi-shell-injection · Exploit
• 🔥 https://github.com/vulnbe/poc-yaws-dav-xxe · Exploit
• 🔥 https://packetstormsecurity.com/files/159106/Yaws-2.0.7-XML-Injection-Command-Injection.html · Exploit
• 🔥 https://vuln.be/post/yaws-xxe-and-shell-injections · Exploit
• https://github.com/erlyaws/yaws/commits/master · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-24916 · Security Note
• https://ubuntu.com/security/CVE-2020-24379 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-01727 · Security Note
• https://ubuntu.com/security/CVE-2020-24916 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-24916 · Vendor Advisory
• https://usn.ubuntu.com/4569-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-24916 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-24916 · Vendor Advisory
• https://osv.dev/vulnerability/USN-4569-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-24916 · Vendor Advisory