CVE-2018-1000042

Security Onion Solutions Squert version 1.3.0 through 1.6.7 contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in .inc/callback.php that can result in execution of OS Commands. This attack appear to be exploitable via Web request to .inc/callback.php with the payload in the data or obj parameters, used in autocat(). This vulnerability appears to have been fixed in 1.7.0.

CVSS v3 9.8 CRITICAL
CVSS v2.0 10.0 HIGH

9.8^/10

CVSS v3 : CRITICAL

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://blog.securityonion.net/2018/01/security-advisory-for-squert.html	Patch Vendor Advisory
http://blog.securityonion.net/2018/01/security-advisory-for-squert.html	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:securityonion:squert:*:*:*:*:*:*:*:*

History

21 Nov 2024, 03:39

Type	Values Removed	Values Added
References	~~() http://blog.securityonion.net/2018/01/security-advisory-for-squert.html - Patch, Vendor Advisory~~	() http://blog.securityonion.net/2018/01/security-advisory-for-squert.html - Patch, Vendor Advisory

Information

Published : 2018-02-09 23:29

Updated : 2024-11-21 03:39

NVD link : CVE-2018-1000042

Mitre link : CVE-2018-1000042

CVE.ORG link : CVE-2018-1000042

JSON object : View

Products Affected

securityonion

squert

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2018-1000042", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2018-02-09T23:29:01.323", "references": [{"url": "http://blog.securityonion.net/2018/01/security-advisory-for-squert.html", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://blog.securityonion.net/2018/01/security-advisory-for-squert.html", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "Security Onion Solutions Squert version 1.3.0 through 1.6.7 contains a CWE-78: Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in .inc/callback.php that can result in execution of OS Commands. This attack appear to be exploitable via Web request to .inc/callback.php with the payload in the data or obj parameters, used in autocat(). This vulnerability appears to have been fixed in 1.7.0."}, {"lang": "es", "value": "Security Onion Solutions Squert, desde la versi\u00f3n 1.3.0 hasta la 1.6.7, contiene un CWE-78: neutralizaci\u00f3n indebida de elementos especiales empleados en una vulnerabilidad de comandos del sistema operativo (inyecci\u00f3n de comandos del sistema operativo) en .inc/callback.php que puede resultar en la ejecuci\u00f3n de comandos del sistema operativo. El ataque parece ser explotable mediante una petici\u00f3n web a .inc/callback.php con la carga \u00fatil en los par\u00e1metros data u obj, empleados en autocat(). Parece ser que la vulnerabilidad se ha solucionado en la versi\u00f3n 1.7.0."}], "lastModified": "2024-11-21T03:39:30.403", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:securityonion:squert:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E316F16D-8532-4E92-A79C-609E36250C22", "versionEndIncluding": "1.6.7", "versionStartIncluding": "1.1.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}