Detections
Analytics

ALCASAR 'index.php' Crafted HTTP Header RCE

high Nessus Plugin ID 80863

Language:

Synopsis

The remote web server hosts a PHP script that is affected by a remote code execution vulnerability.

Description

The ALCASAR network access controller hosted on the remote web server is affected by a remote code execution vulnerability due to not properly sanitizing user-supplied input to the 'host' HTTP header passed to the 'index.php' script. A remote, unauthenticated attacker can exploit this issue to execute arbitrary commands subject to the privileges of the web server user.

Solution

Upgrade to version 2.8.1 or later. Note that version 2.8.1 may not contain a complete fix, and you should confirm its status with the vendor.

See Also

https://seclists.org/fulldisclosure/2014/Sep/26

https://seclists.org/fulldisclosure/2014/Sep/46

Plugin Details

Severity: High

ID: 80863

File Name: alcasar_index_rce.nasl

Version: 1.6

Type: remote

Family: CGI abuses

Published: 1/20/2015

Updated: 1/19/2021

Supported Sensors: Nessus

Vulnerability Information

CPE: x-cpe:/a:alcasar:alcasar

Required KB Items: www/PHP, installed_sw/ALCASAR

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 9/22/2014

Vulnerability Publication Date: 9/7/2014

Reference Information

BID: 69662, 69869