NVD Vulnerability Detail

CVE-2015-2995

Summary	The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload and execute arbitrary files via a NULL byte after the extension, as demonstrated by a .war%00 file.
Publication Date	June 8, 2015, 11:59 p.m.
Registration Date	Jan. 26, 2021, 2:48 p.m.
Last Update	Nov. 21, 2024, 11:28 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:sysaid:sysaid::::::::			15.1

Related information, measures and tools

No	URL	タグ
1	http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html	Exploit
2	http://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html	Exploit
3	http://seclists.org/fulldisclosure/2015/Jun/8	Exploit
4	http://seclists.org/fulldisclosure/2015/Jun/8	Exploit
5	http://www.rapid7.com/db/modules/exploit/multi/http/sysaid_rdslogs_file_upload	Exploit
6	http://www.rapid7.com/db/modules/exploit/multi/http/sysaid_rdslogs_file_upload	Exploit
7	http://www.securityfocus.com/archive/1/535679/100/0/threaded
8	http://www.securityfocus.com/archive/1/535679/100/0/threaded
9	http://www.securityfocus.com/bid/75038
10	http://www.securityfocus.com/bid/75038
11	https://www.exploit-db.com/exploits/37667/
12	https://www.exploit-db.com/exploits/37667/
13	https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk	Vendor Advisory
14	https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk	Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-22	パス・トラバーサル	https://cwe.mitre.org/data/definitions/22.html

JVN Vulnerability Information

SysAid Help Desk における任意のファイルをアップロードされる脆弱性

Title	SysAid Help Desk における任意のファイルをアップロードされる脆弱性
Summary	SysAid Help Desk は、ファイルの拡張子を適切にチェックしないため、任意のファイルをアップロードされ、実行される脆弱性が存在します。
Possible impacts	第三者により、拡張子の後の NULL バイトを介して、任意のファイルをアップロードされ、実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	June 3, 2015, midnight
Registration Date	June 10, 2015, 2:02 p.m.
Last Update	June 10, 2015, 2:02 p.m.

Affected System

SysAid Technologies Ltd.

SysAid Help Desk 15.2 未満

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2015-2995	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2995
National Vulnerability Database (NVD)
2	CVE-2015-2995	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-2995

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-22	https://jvndb.jvn.jp/ja/cwe/CWE-22.html

ベンダー情報

No	Name	URL
SysAid Blog
1	SysAid 15.2: Your Voice, Your Service Desk	https://www.sysaid.com/blog/entry/sysaid-15-2-your-voice-your-service-desk

その他

No	Name	URL
関連文書
1	SysAid Help Desk 14.4 Code Execution / Denial Of Service / Traversal / SQL Injection	https://packetstormsecurity.com/files/132138/SysAid-Help-Desk-14.4-Code-Execution-Denial-Of-Service-Traversal-SQL-Injection.html

Change Log

No	Changed Details	Date of change
0	[2015年06月10日] 掲載	Feb. 17, 2018, 10:37 a.m.