CVE-2012-10033: fallo crítico en Ångström Distribution Project Narcissus
Narcissus backend.php Image Configuration Command Injection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
63Vexday Risk Score
Corrige pronto. Ella tiene exploit funcional público.
ssvc Attendcvss 9.3epss 2.0%
de la publicación al armael mismo día
Publicada en NVD5 ago
metasploit14 nov
Narcissus is vulnerable to remote code execution via improper input handling in its image configuration workflow. Specifically, the backend.php script fails to sanitize the release parameter before passing it to the configure_image() function. This function invokes PHP’s passthru() with the unsanitized input, allowing attackers to inject arbitrary system commands. Exploitation occurs via a crafted POST request, resulting in command execution under the web server’s context.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Ångström Distribution Project · NarcissusPoCs públicas encontradas — 3
cve_referenceraw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/narcissus_backend_exec.rbno verificadocve_referencewww.exploit-db.com/exploits/22709no verificadocve_referencewww.exploit-db.com/exploits/22856no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/narcissus_backend_exec.rbhttps://web.archive.org/web/20101127002623/https://narcissus.angstrom-distribution.org/https://www.exploit-db.com/exploits/22709https://www.exploit-db.com/exploits/22856https://www.vulncheck.com/advisories/narcissus-image-config-command-injection