Vulnerability CVE-2014-8507 - CERT Civis.Net

Vulnerability Name:

CVE-2014-8507 (CCN-99008)

Assigned:

2014-11-26

Published:

2014-11-26

Updated:

2015-08-06

Summary:

Multiple SQL injection vulnerabilities in the queryLastApp method in packages/WAPPushManager/src/com/android/smspush/WapPushManager.java in the WAPPushManager module in Android before 5.0.0 allow remote attackers to execute arbitrary SQL commands, and consequently launch an activity or service, via the (1) wapAppId or (2) contentType field of a PDU for a malformed WAPPush message, aka Bug 17969135.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
6.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
6.5 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Data Manipulation

References:

Source: MITRE
Type: CNA
CVE-2014-8507

Source: MISC
Type: Exploit
http://packetstormsecurity.com/files/129283/Android-WAPPushManager-SQL-Injection.html

Source: CCN
Type: Full Disclosure Mailing List, Wed, 26 Nov 2014 02:55:23 +0000
CVE-2014-8507 Android < 5.0 SQL injection vulnerability in WAPPushManager

Source: FULLDISC
Type: Exploit
20141126 CVE-2014-8507 Android < 5.0 SQL injection vulnerability in WAPPushManager

Source: BID
Type: UNKNOWN
71310

Source: CCN
Type: BID-71310
Android WAPPushManager Module SQL Injection Vulnerability

Source: MISC
Type: Exploit
http://xteam.baidu.com/?p=167

Source: CONFIRM
Type: Vendor Advisory
https://android.googlesource.com/platform/frameworks/base/+/48ed835468c6235905459e6ef7df032baf3e4df6

Source: XF
Type: UNKNOWN
android-cve20148507-sql-injection(99008)

Source: CCN
Type: Packet Storm Security [11-26-2014]
Android WAPPushManager SQL Injection

Source: CCN
Type: Android Web site
Android

Source: EXPLOIT-DB
Type: EXPLOIT
Offensive Security Exploit Database [11-26-2014]

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2014-8507

Vulnerable Configuration:

Configuration 1:

cpe:/o:google:android:1.0:*:*:*:*:*:*:*

OR cpe:/o:google:android:1.1:*:*:*:*:*:*:*

OR cpe:/o:google:android:1.5:*:*:*:*:*:*:*

OR cpe:/o:google:android:1.6:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.0:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.0.1:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.1:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.2:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.2:rev1:*:*:*:*:*:*

OR cpe:/o:google:android:2.2.1:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.2.2:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.2.3:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.3:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.3:rev1:*:*:*:*:*:*

OR cpe:/o:google:android:2.3.1:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.3.2:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.3.3:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.3.4:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.3.5:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.3.6:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.3.7:*:*:*:*:*:*:*

OR cpe:/o:google:android:3.0:*:*:*:*:*:*:*

OR cpe:/o:google:android:3.1:*:*:*:*:*:*:*

OR cpe:/o:google:android:3.2:*:*:*:*:*:*:*

OR cpe:/o:google:android:3.2.1:*:*:*:*:*:*:*

OR cpe:/o:google:android:3.2.2:*:*:*:*:*:*:*

OR cpe:/o:google:android:3.2.4:*:*:*:*:*:*:*

OR cpe:/o:google:android:3.2.6:*:*:*:*:*:*:*

OR cpe:/o:google:android:4.0:*:*:*:*:*:*:*

OR cpe:/o:google:android:4.0.1:*:*:*:*:*:*:*

OR cpe:/o:google:android:4.0.2:*:*:*:*:*:*:*

OR cpe:/o:google:android:4.0.3:*:*:*:*:*:*:*

OR cpe:/o:google:android:4.0.4:*:*:*:*:*:*:*

OR cpe:/o:google:android:4.1:*:*:*:*:*:*:*

OR cpe:/o:google:android:4.1.2:*:*:*:*:*:*:*

OR cpe:/o:google:android:4.2:*:*:*:*:*:*:*

OR cpe:/o:google:android:4.2.1:*:*:*:*:*:*:*

OR cpe:/o:google:android:4.2.2:*:*:*:*:*:*:*

OR cpe:/o:google:android:4.3:*:*:*:*:*:*:*

OR cpe:/o:google:android:4.3.1:*:*:*:*:*:*:*

OR cpe:/o:google:android:4.4:*:*:*:*:*:*:*

OR cpe:/o:google:android:4.4.1:*:*:*:*:*:*:*

OR cpe:/o:google:android:4.4.2:*:*:*:*:*:*:*

OR cpe:/o:google:android:4.4.3:*:*:*:*:*:*:*

OR cpe:/o:google:android:*:*:*:*:*:*:*:* (Version <= 4.4.4)

Configuration CCN 1:

cpe:/o:google:android:2.2:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.1:*:*:*:*:*:*:*

OR cpe:/o:google:android:3.0:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.2.1:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.2.2:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.3.3:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.3.4:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.3.1:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.3.2:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.3.5:*:*:*:*:*:*:*

OR cpe:/o:google:android:1.5:*:*:*:*:*:*:*

OR cpe:/o:google:android:1.6:*:*:*:*:*:*:*

OR cpe:/o:google:android:2.2.3:*:*:*:*:*:*:*

OR cpe:/o:google:android:3.2:*:*:*:*:*:*:*

Denotes that component is vulnerable