oss-security - CVE Request: SuiteCRM Post Auth RCE

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <555C5853.8010903@xiphosresearch.co.uk>
Date: Wed, 20 May 2015 09:48:03 +0000
From: Darren Martyn <darren.martyn@...hosresearch.co.uk>
To: oss-security@...ts.openwall.com
Subject: CVE Request: SuiteCRM Post Auth RCE

Hi all,
CVE request here for a post auth RCE in the SuiteCRM (7.5.1 at least,
probably earlier versions too, but have to get time to test those)
software. Deadline has expired without contact from vendor, so disclosing.

The vulnerability is a simple shell upload via avoiding a rather rubbish
blacklist used to try (and fail) to prevent the upload of executable
code. Fully automatic PoC included for testing/replicating the issue.
Due to the fact they clearly intended to prevent upload/execution of
executable code, I am of the view it is a vulnerability as opposed to
abuse of functionality.

PoC: https://github.com/XiphosResearch/exploits/tree/master/suiteshell

Best regards,
Darren Martyn

Download attachment "signature.asc" of type "application/pgp-signature" (820 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.