CVE-2013-1892

EPSS 44.5%

MongoDB before 2.0.9 and 2.2.x before 2.2.4 does not properly validate requests to the nativeHelper function in SpiderMonkey, which allows remote authenticated users to cause a denial of service (invalid memory access and server crash) or execute arbitrary code via a crafted memory address in the first argument.

Affected products

n/a · n/a

public PoCs found — 4

cve_referencewww.exploit-db.com/exploits/24935unverified cve_referencewww.exploit-db.com/exploits/24947unverified exploitdbwww.exploit-db.com/exploits/24935unverified exploitdbwww.exploit-db.com/exploits/24947unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://blog.scrt.ch/2013/03/24/mongodb-0-day-ssji-to-rce/http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101630.html http://lists.fedoraproject.org/pipermail/package-announce/2013-April/101679.html http://rhn.redhat.com/errata/RHSA-2013-1170.html https://jira.mongodb.org/browse/SERVER-9124 http://www.exploit-db.com/exploits/24935 http://www.exploit-db.com/exploits/24947 http://www.mongodb.org/about/alerts/http://www.openwall.com/lists/oss-security/2013/03/25/9