NVD

Id
83325  
Name
CVE-2017-6398  
Description
An issue was discovered in Trend Micro InterScan Messaging Security (Virtual Appliance) 9.1-1600. An authenticated user can execute a terminal command in the context of the web server user (which is root). Besides, the default installation of IMSVA comes with default administrator credentials. The saveCert.imss endpoint takes several user inputs and performs blacklisting. After that, it uses them as arguments to a predefined operating-system command without proper sanitization. However, because of an improper blacklisting rule, it's possible to inject arbitrary commands into it.  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-03-18  
Published
2017-03-14  
Modified Date
2017-03-15  
Seq
2017-6398  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
409661 83325 CVE-2016-7623 94913  View
409662 83325 CVE-2016-7623 https://support.apple.com/HT207421  View
409663 83325 CVE-2016-7623 https://support.apple.com/HT207422  View
409664 83325 CVE-2016-7623 94913  View
409665 83325 CVE-2016-7623 https://support.apple.com/HT207421  View
409666 83325 CVE-2016-7623 https://support.apple.com/HT207422  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
65872 JVNDB-2017-002211 Trend Micro InterScan Messaging Security (Virtual Appliance) におけるターミナルコマンドを実行される脆弱性 Trend Micro InterScan Messaging Security (Virtual Appliance) には、Web サーバユーザ (root) のコンテキスト内でターミナルコマンドを実行される脆弱性が存在します。 CVE-2017-6398 CVE-2017-6398 83325 9 8.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002211.html 2017-03-14 2017-04-03 View