lfs/backup in IPFire 2.25-core155 does not ensure that /var/ipfire/backup/bin/backup.pl is owned by the root account. It might be owned by an unprivileged account, which could potentially be used to install a Trojan horse backup.pl script that is later executed by root. Similar problems with the ownership/permissions of other files may be present as well.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/163158/IPFire-2.25-Remote-Code-Execution.html | Exploit Third Party Advisory VDB Entry |
| https://github.com/MucahitSaratar/ipfire-2-25-auth-rce | Exploit Third Party Advisory |
| https://github.com/ipfire/ipfire-2.x/commit/6769d909306d7bdc43d64598872126fcf1b217f6 | Patch Third Party Advisory |
| https://github.com/ipfire/ipfire-2.x/commits/master?since=2021-05-17&until=2021-05-17 | Third Party Advisory |
| http://packetstormsecurity.com/files/163158/IPFire-2.25-Remote-Code-Execution.html | Exploit Third Party Advisory VDB Entry |
| https://github.com/MucahitSaratar/ipfire-2-25-auth-rce | Exploit Third Party Advisory |
| https://github.com/ipfire/ipfire-2.x/commit/6769d909306d7bdc43d64598872126fcf1b217f6 | Patch Third Party Advisory |
| https://github.com/ipfire/ipfire-2.x/commits/master?since=2021-05-17&until=2021-05-17 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:08
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/163158/IPFire-2.25-Remote-Code-Execution.html - Exploit, Third Party Advisory, VDB Entry | |
| References | () https://github.com/MucahitSaratar/ipfire-2-25-auth-rce - Exploit, Third Party Advisory | |
| References | () https://github.com/ipfire/ipfire-2.x/commit/6769d909306d7bdc43d64598872126fcf1b217f6 - Patch, Third Party Advisory | |
| References | () https://github.com/ipfire/ipfire-2.x/commits/master?since=2021-05-17&until=2021-05-17 - Third Party Advisory |
12 Jul 2022, 17:42
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-Other |
21 Jun 2021, 19:40
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | NVD-CWE-noinfo | |
| CPE | cpe:2.3:a:ipfire:ipfire:2.25:core_update147:*:*:*:*:*:* cpe:2.3:a:ipfire:ipfire:2.25:core_update151:*:*:*:*:*:* cpe:2.3:a:ipfire:ipfire:2.25:core_update145:*:*:*:*:*:* cpe:2.3:a:ipfire:ipfire:2.25:core_update146:*:*:*:*:*:* cpe:2.3:a:ipfire:ipfire:2.25:core_update144:*:*:*:*:*:* cpe:2.3:a:ipfire:ipfire:2.25:core_update152:*:*:*:*:*:* cpe:2.3:a:ipfire:ipfire:2.25:core_update150:*:*:*:*:*:* cpe:2.3:a:ipfire:ipfire:2.25:core_update143:*:*:*:*:*:* cpe:2.3:a:ipfire:ipfire:2.25:core_update155:*:*:*:*:*:* cpe:2.3:a:ipfire:ipfire:2.25:core_update148:*:*:*:*:*:* cpe:2.3:a:ipfire:ipfire:2.25:core_update156:*:*:*:*:*:* cpe:2.3:a:ipfire:ipfire:2.25:core_update141:*:*:*:*:*:* cpe:2.3:a:ipfire:ipfire:*:*:*:*:*:*:*:* cpe:2.3:a:ipfire:ipfire:2.25:core_update149:*:*:*:*:*:* cpe:2.3:a:ipfire:ipfire:2.25:core_update142:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 9.0
v3 : 8.8 |
| References | (MISC) http://packetstormsecurity.com/files/163158/IPFire-2.25-Remote-Code-Execution.html - Exploit, Third Party Advisory, VDB Entry | |
| References | (MISC) https://github.com/ipfire/ipfire-2.x/commits/master?since=2021-05-17&until=2021-05-17 - Third Party Advisory | |
| References | (MISC) https://github.com/MucahitSaratar/ipfire-2-25-auth-rce - Exploit, Third Party Advisory | |
| References | (MISC) https://github.com/ipfire/ipfire-2.x/commit/6769d909306d7bdc43d64598872126fcf1b217f6 - Patch, Third Party Advisory |
15 Jun 2021, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
09 Jun 2021, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2021-06-09 22:15
Updated : 2024-11-21 06:08
NVD link : CVE-2021-33393
Mitre link : CVE-2021-33393
CVE.ORG link : CVE-2021-33393
JSON object : View
Products Affected
ipfire
- ipfire
CWE