OSSIM Open Source Security Information Management 'modifyportform.php' SQL Injection Vulnerability
BID:27927
Info
OSSIM Open Source Security Information Management 'modifyportform.php' SQL Injection Vulnerability
| Bugtraq ID: | 27927 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-0920 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 21 2008 12:00AM |
| Updated: | May 07 2015 05:32PM |
| Credit: | Marcin Kopec is credited with the discovery of this vulnerability. |
| Vulnerable: |
OSSIM os-sim 0.9.9 rc5 OSSIM os-sim 0.9.9 rc4 OSSIM os-sim 0.9.9 rc3 OSSIM os-sim 0.9.9 rc2 OSSIM os-sim 0.9.9 rc1 OSSIM os-sim 0.9.9 OSSIM os-sim 0.9.8 OSSIM os-sim 0.9.7 OSSIM os-sim 0.9.6 OSSIM os-sim 0.9.5 OSSIM os-sim 0.9.4 OSSIM os-sim 0.9.3 OSSIM os-sim 0.9.2 OSSIM os-sim 0.9.1 OSSIM os-sim 0.9 OSSIM os-sim 0.7.1 OSSIM os-sim 0.6.3 OSSIM os-sim 0.6.2 OSSIM os-sim 0.5.2 OSSIM os-sim 0.5.1 OSSIM os-sim 0.3.1 -alpha OSSIM os-sim 0.3 -alpha OSSIM os-sim 0.2 -alpha OSSIM os-sim 0.1 -alpha OSSIM os-sim 0.8 OSSIM os-sim 0.7 OSSIM os-sim 0.6 OSSIM os-sim 0.5-alpha OSSIM os-sim 0.4-alpha |
| Not Vulnerable: | |
Discussion
OSSIM Open Source Security Information Management 'modifyportform.php' SQL Injection Vulnerability
OSSIM (Open Source Security Information Management) is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Attackers with port modification rights can leverage this issue to obtain hashed administrator passwords.
OSSIM 0.9.9 and prior versions are vulnerable.
OSSIM (Open Source Security Information Management) is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.
Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Attackers with port modification rights can leverage this issue to obtain hashed administrator passwords.
OSSIM 0.9.9 and prior versions are vulnerable.
Exploit / POC
OSSIM Open Source Security Information Management 'modifyportform.php' SQL Injection Vulnerability
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/ossim/port/modifyportform.php?portname=ANY'%20and%201=2%20union%20select%20pass,2%20from%20ossim.users%20where%20login='admin
Attackers can use a browser to exploit this issue.
The following example URI is available:
http://www.example.com/ossim/port/modifyportform.php?portname=ANY'%20and%201=2%20union%20select%20pass,2%20from%20ossim.users%20where%20login='admin
Solution / Fix
OSSIM Open Source Security Information Management 'modifyportform.php' SQL Injection Vulnerability
Solution:
The vendor states that a fix for this issue is forthcoming. We will update this BID as more information emerges.
Solution:
The vendor states that a fix for this issue is forthcoming. We will update this BID as more information emerges.
References
OSSIM Open Source Security Information Management 'modifyportform.php' SQL Injection Vulnerability
References:
References: