CVE-2011-4213

The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent use of the os module, which allows local users to bypass intended access restrictions and execute arbitrary commands via a file_blob_storage.os reference within the code parameter to _ah/admin/interactive/execute, a different vulnerability than CVE-2011-1364.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://blog.watchfire.com/files/googleappenginesdk.pdf	Exploit
http://code.google.com/p/googleappengine/wiki/SdkReleaseNotes	Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/71062	VDB Entry
http://blog.watchfire.com/files/googleappenginesdk.pdf	Exploit
http://code.google.com/p/googleappengine/wiki/SdkReleaseNotes	Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/71062	VDB Entry

Configurations

Configuration 1 (hide)

cpe:2.3:a:google:app_engine_python_sdk:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:32

Type	Values Removed	Values Added
References	~~() http://blog.watchfire.com/files/googleappenginesdk.pdf - Exploit~~	() http://blog.watchfire.com/files/googleappenginesdk.pdf - Exploit
References	~~() http://code.google.com/p/googleappengine/wiki/SdkReleaseNotes - Patch~~	() http://code.google.com/p/googleappengine/wiki/SdkReleaseNotes - Patch
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/71062 - VDB Entry~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/71062 - VDB Entry

Information

Published : 2011-10-30 19:55

Updated : 2024-11-21 01:32

NVD link : CVE-2011-4213

Mitre link : CVE-2011-4213

CVE.ORG link : CVE-2011-4213

JSON object : View

Products Affected

google

app_engine_python_sdk

CWE

CWE-264

Permissions, Privileges, and Access Controls

{"id": "CVE-2011-4213", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2011-10-30T19:55:01.053", "references": [{"url": "http://blog.watchfire.com/files/googleappenginesdk.pdf", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://code.google.com/p/googleappengine/wiki/SdkReleaseNotes", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71062", "tags": ["VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://blog.watchfire.com/files/googleappenginesdk.pdf", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://code.google.com/p/googleappengine/wiki/SdkReleaseNotes", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/71062", "tags": ["VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent use of the os module, which allows local users to bypass intended access restrictions and execute arbitrary commands via a file_blob_storage.os reference within the code parameter to _ah/admin/interactive/execute, a different vulnerability than CVE-2011-1364."}, {"lang": "es", "value": "El entorno Sandbox en el motor de aplicaciones de Google de Python SDK anterior a la versi\u00f3n 1.5.4, no impide apropiadamente el uso del m\u00f3dulo de sistema operativo, lo que permite a los usuarios locales omitir las restricciones de acceso previstas y ejecutar comandos arbitrarios por medio de una referencia file_blob_storage.os dentro del par\u00e1metro Code a _ah/admin/interactive/execute, una vulnerabilidad diferente a CVE-2011-1364."}], "lastModified": "2024-11-21T01:32:01.633", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:google:app_engine_python_sdk:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50413F23-6A56-4A76-9061-5DD1B6FC17CA", "versionEndExcluding": "1.5.4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}