CVE-2016-9554— Sophos Web Appliance 安全漏洞

N/A

The Sophos Web Appliance Remote / Secure Web Gateway server (version 4.2.1.3) is vulnerable to a Remote Command Injection vulnerability in its web administrative interface. These vulnerabilities occur in MgrDiagnosticTools.php (/controllers/MgrDiagnosticTools.php), in the component responsible for performing diagnostic tests with the UNIX wget utility. The application doesn't properly escape the information passed in the 'url' variable before calling the executeCommand class function ($this->dtObj->executeCommand). This function calls exec() with unsanitized user input allowing for remote command injection. The page that contains the vulnerabilities, /controllers/MgrDiagnosticTools.php, is accessed by a built-in command answered by the administrative interface. The command that calls to that vulnerable page (passed in the 'section' parameter) is: 'configuration'. Exploitation of this vulnerability yields shell access to the remote machine under the 'spiderman' user account.

N/A

N/A

Sophos Web Appliance 安全漏洞

Sophos Web Appliance（SWA）是英国Sophos公司的一套Web安全网关产品。该产品支持实时网络威胁防护、自定义Web过滤和动态控制应用程序等。 Sophos Web Appliance 4.2.1.3版本中的Web管理界面的MgrDiagnosticTools.php(/controllers/MgrDiagnosticTools.php)文件存在远程代码注入漏洞。攻击者可利用该漏洞获取远程机器的shell访问权限。

N/A

N/A