Vulnerability CVE-2011-1366 - CERT Civis.Net

Vulnerability Name:

CVE-2011-1366 (CCN-70043)

Assigned:

2011-10-06

Published:

2011-10-06

Updated:

2017-08-17

Summary:

Unspecified vulnerability in the Import feature in IBM Rational AppScan Enterprise and AppScan Reporting Console 5.2 through 7.9.x and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary commands on an agent server via a crafted ZIP archive.

CVSS v3 Severity:

9.1 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): None Integrity (I): High Availibility (A): High

CVSS v2 Severity:

8.8 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:C/A:C)
6.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Complete Availibility (A): Complete

8.8 High (CCN CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:C/A:C)
6.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): None
Impact Metrics:	Confidentiality (C): None Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2011-1366

Source: CCN
Type: SA46326
IBM Rational AppScan Products Two Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
46326

Source: CCN
Type: SA46329
IBM Rational AppScan Products Two Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
46329

Source: CONFIRM
Type: UNKNOWN
http://www-01.ibm.com/support/docview.wss?uid=swg21515110

Source: CCN
Type: OSVDB ID: 76081
IBM Rational AppScan Import Functionality ZIP File Handling Remote Code Execution

Source: CCN
Type: BID-49988
IBM Rational AppScan 'ZIP' file Remote Command Execution Vulnerability

Source: XF
Type: UNKNOWN
rational-appscan-zip-code-execution(70043)

Source: XF
Type: UNKNOWN
rational-appscan-zip-code-execution(70043)

Source: CCN
Type: IBM Security Bulletin 1515110
Vulnerability in Rational AppScan Standard, Express, Enterprise and Reporting Console with potential for command execution (CVE-2011-1366, CVE-2011-1367)

Vulnerable Configuration:

Configuration 1:

cpe:/a:ibm:rational_appscan:5.2:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:5.4:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:5.5:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:5.5.0:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:5.5.0.1:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:5.5.0.2:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:5.6.0:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:5.6.0.3:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.7.0:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.7.0.1:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.7.0.2:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.8.0:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.8.0.1:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.8.0.2:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.9.0:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.9.0.1:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.9.0.2:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.9.0.3:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:8.0.0:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:8.0.0.1:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:8.0.0.2:*:enterprise:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:8.0.1:*:enterprise:*:*:*:*:*

Configuration 2:

cpe:/a:ibm:rational_appscan:5.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:5.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:5.5:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:5.5.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:5.5.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:5.5.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:5.6.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:5.6.0.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.7.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.7.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.7.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.8.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.8.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.8.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.9.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.9.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.9.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:7.9.0.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:8.0.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:8.0.0.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:8.0.0.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:rational_appscan:8.0.0.3:*:*:*:*:*:*:*

Denotes that component is vulnerable