GIT gitweb git_search Shell Metacharacter Arbitrary Command Execution

High Nessus Plugin ID 53336

Synopsis

The remote web server contains a CGI script that can be abused to execute arbitrary commands.

Description

The version of gitweb, a web-enabled interface to the open source distributed version control system Git, hosted on the remote web server fails to sanitize user-supplied input to the 'gitweb.cgi' script of shell metacharacters before passing it to a shell.

An unauthenticated, remote attacker can leverage this issue to execute arbitrary commands subject to the privileges under which the web server operates.

Solution

Upgrade to version 1.5.6 or later.

See Also

http://www.nessus.org/u?f84acd89

Plugin Details

Severity: High

ID: 53336

File Name: gitweb_git_search_cmd_exec.nasl

Version: 1.11

Type: remote

Family: CGI abuses

Published: 2011/04/08

Modified: 2018/11/15

Dependencies: 10107

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 7.5

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:git:git

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2008/03/05

Vulnerability Publication Date: 2009/01/19

Reference Information

CVE: CVE-2008-5516

BID: 33355

Secunia: 33607

CWE: 78, 264