PT-2021-4111 · Sabnzbd · Sabnzbd

Puzzledsab · Published 2021-03-11 · Updated 2021-05-19 · CVE-2021-29488

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions SABnzbd versions prior to 3.2.1RC1

Description A vulnerability was discovered in SABnzbd that could trick the filesystem.renamer() function into writing downloaded files outside the configured Download Folder via malicious PAR2 files. The issue is related to errors in handling relative directory paths. Exploitation of this vulnerability may allow a remote attacker to impact data integrity using a malicious PAR2 file.

Recommendations For versions prior to 3.2.1RC1, update to version 3.2.1RC1 or later to resolve the issue. As a temporary workaround, consider limiting downloads to NZBs without PAR2 files. Deny write permissions to the SABnzbd process outside areas it must access to perform its job until a patch is applied.

Fix

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

BDU:2021-04701

CVE-2021-29488

GHSA-JWJ3-WRVF-V3RP

Affected Products

Sabnzbd

References · 11

• https://github.com/sabnzbd/sabnzbd/security/advisories/GHSA-jwj3-wrvf-v3rp · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-29488 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-29488 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-29488 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-29488 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-29488 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-29488 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-29488 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-04701 · Security Note
• https://github.com/sabnzbd/sabnzbd/commit/3766ba54026eaa520dbee5b57a2f33d4954fb98b · Note
• https://t.me/cvenotify/14690 · Telegram Post