CIDER Shadow Analyzer Remote Command Execution Vulnerability
BID:4625
Info
CIDER Shadow Analyzer Remote Command Execution Vulnerability
| Bugtraq ID: | 4625 |
| Class: | Input Validation Error |
| CVE: |
CVE-2002-0091 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 29 2002 12:00AM |
| Updated: | Jul 11 2009 12:46PM |
| Credit: | Discovery of this issue is credited to Kevin Kotas of the eSecurityOnline Research and Development Team. |
| Vulnerable: |
CIDER Shadow 1.6 CIDER Shadow 1.5 |
| Not Vulnerable: | |
Discussion
CIDER Shadow Analyzer Remote Command Execution Vulnerability
CIDER (Cooperative Intrusion Detection Evaluation and Response) Shadow Analyzer is a component of the Shadow Intrusion Detection System. It will run on a number of Linux distributions. The CIDER Shadow Analyzer component is intended to be only accessible within the internal network.
The CIDER Shadow Analyzer does not adequately filter shell metacharacters. As a result, remote attackers may execute commands on the underlying host with the privileges of the webserver process.
This may enable a remote attacker within the internal network to gain local access to the host running the vulnerable software.
It is not known whether CIDER Shadow 1.7 is also affected by this issue.
CIDER (Cooperative Intrusion Detection Evaluation and Response) Shadow Analyzer is a component of the Shadow Intrusion Detection System. It will run on a number of Linux distributions. The CIDER Shadow Analyzer component is intended to be only accessible within the internal network.
The CIDER Shadow Analyzer does not adequately filter shell metacharacters. As a result, remote attackers may execute commands on the underlying host with the privileges of the webserver process.
This may enable a remote attacker within the internal network to gain local access to the host running the vulnerable software.
It is not known whether CIDER Shadow 1.7 is also affected by this issue.
Exploit / POC
CIDER Shadow Analyzer Remote Command Execution Vulnerability
This issue may be exploited with a web browser.
This issue may be exploited with a web browser.
Solution / Fix
CIDER Shadow Analyzer Remote Command Execution Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
CIDER Shadow Analyzer Remote Command Execution Vulnerability
References:
References:
- CIDER Shadow Homepage (Naval Surface Warfare Center)