Multiple CRLF injection vulnerabilities in the FTP module in Erlang/OTP R15B03 allow context-dependent attackers to inject arbitrary FTP commands via CRLF sequences in the (1) user, (2) account, (3) cd, (4) ls, (5) nlist, (6) rename, (7) delete, (8) mkdir, (9) rmdir, (10) recv, (11) recv_bin, (12) recv_chunk_start, (13) send, (14) send_bin, (15) send_chunk_start, (16) append_chunk_start, (17) append, or (18) append_bin command.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3571-1 advisory.

    It was discovered that the Erlang FTP module incorrectly handled certain CRLF sequences. A remote attacker     could possibly use this issue to inject arbitrary FTP commands. This issue only affected Ubuntu 14.04 LTS.
    (CVE-2014-1693)

    It was discovered that Erlang incorrectly checked CBC padding bytes. A remote attacker could possibly use     this issue to perform a padding oracle attack and decrypt traffic. This issue only affected Ubuntu 14.04     LTS. (CVE-2015-2774)

    It was discovered that Erlang incorrectly handled certain regular expressions. A remote attacker could     possibly use this issue to cause Erlang to crash, resulting in a denial of service, or execute arbitrary     code. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-10253)

    Hanno Bck, Juraj Somorovsky and Craig Young discovered that the Erlang otp TLS server incorrectly     handled error reporting. A remote attacker could possibly use this issue to perform a variation of the     Bleichenbacher attack and decrypt traffic or sign messages. (CVE-2017-1000385)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Updated erlang packages fixes security vulnerability :

An FTP command injection flaw was found in Erlang's FTP module.
Several functions in the FTP module do not properly sanitize the input before passing it into a control socket. A local attacker can use this flaw to execute arbitrary FTP commands on a system that uses this module (CVE-2014-1693).

This update also disables SSLv3 by default to mitigate the POODLE issue.

- Ver. 17.4

    - Disable SSLv3

    - Backport useful os:getenv/2 from master. See this       GitHub pull request for further details -       https://github.com/erlang/otp/pull/535

    - Fixed CVE-2014-1693 (backported fix from ver. 17.x.x,       see patch no. 17)

    - Trimmed dependency chain

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Disable SSLv3

    - Backport useful os:getenv/2 from master. See this       GitHub pull request for further details -       https://github.com/erlang/otp/pull/535

    - Fixed CVE-2014-1693 (backported fix from ver. 17.x.x,       see patch no. 17)

    - Trimmed dependency chain

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Fixed CVE-2014-1693 (backported fix from ver. 17.x.x,     see patch no. 17)

    - Trimmed dependency chain

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
106838	Ubuntu 14.04 LTS / 16.04 LTS : Erlang vulnerabilities (USN-3571-1)	Nessus	Ubuntu Local Security Checks	critical
82484	Mandriva Linux Security Advisory : erlang (MDVSA-2015:174)	Nessus	Mandriva Local Security Checks	high
80235	Fedora 21 : erlang-17.4-1.fc21 (2014-17009)	Nessus	Fedora Local Security Checks	high
79921	Fedora 20 : erlang-R16B-03.10.fc20 (2014-16214)	Nessus	Fedora Local Security Checks	high
79647	Fedora 20 : erlang-R16B-03.9.fc20 (2014-15394)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2014-1693

critical

Tenable Plugins

critical

high

high

high

high