在线时间:8:00-16:00
迪恩网络APP
随时随地掌握行业动态
扫描二维码
关注迪恩网络微信公众号
CVE-2019-9859Vesta Control Panel 安全漏洞
发布时间:2020-03-10类型:CANstatus:Candidatephase:Assigned 漏洞描述Vesta Control Panel(VestaCP)是一个开源的虚拟主机控制面板。 VestaCP 0.9.7版本至0.9.8-23版本中存在操作系统命令注入漏洞。攻击者可利用该漏洞提升权限。Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the dangerous command exec. This function can be dangerous if arguments passed to it are not filtered. Every user input in VestaCP that is used as an argument is filtered with the escapeshellarg function. This function comes from the PHP library directly and its description is as follows: "escapeshellarg() adds single quotes around a string and quotes/escapes any existing single quotes allowing you to pass a string directly to a shell function and having it be treated as a single safe argument." It means that if you give Username, it will have 'Username' as a replacement. This works well and protects users from exploiting this potentially dangerous exec function. Unfortunately, VestaCP uses this escapeshellarg function incorrectly in several places. 参考文献 |
2023-10-27
2022-08-15
2022-08-17
2022-09-23
2022-08-13
请发表评论