PT-2024-28730 · Fog · Fog

Philipp-Tg · Published 2024-07-12 · Updated 2024-09-05 · CVE-2024-39916

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions FOG versions prior to 1.5.10.30

Description The issue concerns the NFS configuration in /etc/exports generated by the FOG installer, which allows an attacker to modify files outside the export in the default installation. The no subtree check option in the exports means that the server only checks if the requested file is on the correct filesystem, not if it is in the correct directory. This enables modifying files in /images, accessing other files on the same filesystem, and accessing files on other filesystems.

Recommendations For versions prior to 1.5.10.30, update to version 1.5.10.30 to resolve the issue. As a temporary workaround, consider modifying the NFS configuration to remove the no subtree check option from the exports in /etc/exports to prevent unauthorized file access.

Exploit

Fix

Weakness Enumeration

CWE-453

CWE-1188

Related Identifiers

CVE-2024-39916

GHSA-3XJR-XF9V-HWJH

Affected Products

Fog

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39916.json · Exploit
• https://github.com/FOGProject/fogproject/commit/2de209bc57a177a052b4a877f000c591740b2f88 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-39916 · Security Note
• https://osv.dev/vulnerability/CVE-2024-39916 · Vendor Advisory
• https://github.com/FOGProject/fogproject/security/advisories/GHSA-3xjr-xf9v-hwjh · Note
• https://t.me/cvedetector/761 · Telegram Post