Bomgar Remote Support CVE-2015-0935 Arbitrary PHP Code Execution Vulnerability

Bugtraq ID:	74460
Class:	Input Validation Error
CVE:	CVE-2015-0935
Remote:	Yes
Local:	No
Published:	May 05 2015 12:00AM
Updated:	Jul 28 2016 12:01AM
Credit:	Markus Wulftange
Vulnerable:	Bomgar Remote Support 14.3.1
Not Vulnerable:	Bomgar Remote Support 15.1.1

Bomgar Remote Support CVE-2015-0935 Arbitrary PHP Code Execution Vulnerability

Bomgar Remote Support is prone to an arbitrary PHP code-execution vulnerability.

An attacker can exploit this issue to execute arbitrary PHP code within the context of the web server process.

Bomgar Remote Support 14.3.1 is vulnerable; other versions may also be affected.

Bomgar Remote Support CVE-2015-0935 Arbitrary PHP Code Execution Vulnerability

An attacker can exploit this issue using a web browser.

The following metasploit exploit code is available:

• /data/vulnerabilities/exploits/74460.rb

Bomgar Remote Support CVE-2015-0935 Arbitrary PHP Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Bomgar Remote Support CVE-2015-0935 Arbitrary PHP Code Execution Vulnerability

References:

• Vendor Homepage (Bomgar)
  
• Bomgar Remote Support Portal deserializes untrusted data (cert.us)