An issue was discovered in AdaCore ada_web_services 20.0 allows an attacker to escalate privileges and steal sessions via the Random_String() function in the src/core/aws-utils.adb module.

The remote Fedora 41 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-7908ee39a9 advisory.

    CVE-2024-41708: Ada Web Server did not use a cryptographically secure pseudorandom number generator.

    AWS.Utils.Random and AWS.Utils.Random_String used Ada.Numerics.Discrete_Random, which is not designed to     be cryptographically secure. Random_String also introduced a bias in the generated pseudorandom string     values, where the values 1 and 2 had a much higher frequency than any other character.

    The internal state of the Mersenne Twister PRNG could be revealed, and lead to a session hijacking attack.

    This update fixes the problem by using /dev/urandom instead of Discrete_Random.

    More details: https://docs.adacore.com/corp/security-advisories/SEC.AWS-0040-v2.pdf

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-63f98f8c60 advisory.

    CVE-2024-41708: Ada Web Server did not use a cryptographically secure pseudorandom number generator.

    AWS.Utils.Random and AWS.Utils.Random_String used Ada.Numerics.Discrete_Random, which is not designed to     be cryptographically secure. Random_String also introduced a bias in the generated pseudorandom string     values, where the values 1 and 2 had a much higher frequency than any other character.

    The internal state of the Mersenne Twister PRNG could be revealed, and lead to a session hijacking attack.

    This update fixes the problem by using /dev/urandom instead of Discrete_Random.

    More details: https://docs.adacore.com/corp/security-advisories/SEC.AWS-0040-v2.pdf

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-d940f25a53 advisory.

    CVE-2024-41708: Ada Web Server did not use a cryptographically secure pseudorandom number generator.

    AWS.Utils.Random and AWS.Utils.Random_String used Ada.Numerics.Discrete_Random, which is not designed to     be cryptographically secure. Random_String also introduced a bias in the generated pseudorandom string     values, where the values 1 and 2 had a much higher frequency than any other character.

    The internal state of the Mersenne Twister PRNG could be revealed, and lead to a session hijacking attack.

    This update fixes the problem by using /dev/urandom instead of Discrete_Random.

    More details: https://docs.adacore.com/corp/security-advisories/SEC.AWS-0040-v2.pdf

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
211425	Fedora 41 : aws (2024-7908ee39a9)	Nessus	Fedora Local Security Checks	high
208221	Fedora 40 : aws (2024-63f98f8c60)	Nessus	Fedora Local Security Checks	high
208219	Fedora 39 : aws (2024-d940f25a53)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2024-41708

high

Tenable Plugins

high

high

high