FreeBSD : rabbitmq -- Security issues in management plugin (8469d41c-a960-11e4-b18e-bcaec55be5e5)

This script is Copyright (C) 2015-2017 Tenable Network Security, Inc.


Synopsis :

The remote FreeBSD host is missing a security-related update.

Description :

The RabbitMQ project reports :

Some user-controllable content was not properly HTML-escaped before
being presented to a user in the management web UI :

- When a user unqueued a message from the management UI, message
details (header names, arguments, etc.) were displayed unescaped. An
attacker could publish a specially crafted message to add content or
execute arbitrary JavaScript code on behalf of a user, if this user
unqueued the message from the management UI.

- When viewing policies, their name was displayed unescaped. An
attacker could create a policy with a specially crafted name to add
content or execute arbitrary JavaScript code on behalf of a user who
is viewing policies.

- When listing connected AMQP network clients, client details such as
its version were displayed unescaped. An attacker could use a client
with a specially crafted version field to add content or execute
arbitrary JavaScript code on behalf of a user who is viewing connected
clients.

In all cases, the attacker needs a valid user account on the targeted
RabbitMQ cluster.

Furthermore, some admin-controllable content was not properly escaped
:

- user names;

- the cluster name.

Likewise, an attacker could add content or execute arbitrary
JavaScript code on behalf of a user using the management web UI.
However, the attacker must be an administrator on the RabbitMQ
cluster, thus a trusted user.

See also :

http://www.rabbitmq.com/news.html#2015-01-08T10:14:05+0100
http://www.rabbitmq.com/release-notes/README-3.4.3.txt
http://www.nessus.org/u?246962e5

Solution :

Update the affected package.

Risk factor :

Low / CVSS Base Score : 3.5
(CVSS2#AV:N/AC:M/Au:S/C:N/I:P/A:N)

Family: FreeBSD Local Security Checks

Nessus Plugin ID: 81117 ()

Bugtraq ID:

CVE ID: CVE-2015-0862

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now