CVE-2021-31800
Multiple path traversal vulnerabilities exist in smbserver.py in Impac ...
Severidad por fuente
La etiqueta propia de Trivy es CRITICAL. Crítica según NVD, GHSA.
Descripción
Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing /etc/shadow or an SSH authorized key.
Paquetes afectados y versiones corregidas
| Fuente | Paquete | Corregido en |
|---|---|---|
| pip::GitHub Security Advisory pip | impacket | 0.9.23 |
| alpine 3.14 | py3-impacket | 0.9.23-r0 |
| alpine 3.15 | py3-impacket | 0.9.23-r0 |
| alpine 3.16 | py3-impacket | 0.9.23-r0 |
| alpine 3.17 | py3-impacket | 0.9.23-r0 |
| alpine 3.18 | py3-impacket | 0.9.23-r0 |
| alpine 3.19 | py3-impacket | 0.9.23-r0 |
| alpine 3.20 | py3-impacket | 0.9.23-r0 |
| alpine 3.21 | py3-impacket | 0.9.23-r0 |
| alpine 3.22 | py3-impacket | 0.9.23-r0 |
| alpine 3.23 | py3-impacket | 0.9.23-r0 |
| alpine 3.24 | py3-impacket | 0.9.23-r0 |
Mostrar las 20 entradas de 20 fuentes
| Fuente | Paquete | Corregido en |
|---|---|---|
| pip::GitHub Security Advisory pip | impacket | 0.9.23 |
| alpine 3.14 | py3-impacket | 0.9.23-r0 |
| alpine 3.15 | py3-impacket | 0.9.23-r0 |
| alpine 3.16 | py3-impacket | 0.9.23-r0 |
| alpine 3.17 | py3-impacket | 0.9.23-r0 |
| alpine 3.18 | py3-impacket | 0.9.23-r0 |
| alpine 3.19 | py3-impacket | 0.9.23-r0 |
| alpine 3.20 | py3-impacket | 0.9.23-r0 |
| alpine 3.21 | py3-impacket | 0.9.23-r0 |
| alpine 3.22 | py3-impacket | 0.9.23-r0 |
| alpine 3.23 | py3-impacket | 0.9.23-r0 |
| alpine 3.24 | py3-impacket | 0.9.23-r0 |
| alpine edge | py3-impacket | 0.9.23-r0 |
| debian 10 | impacket | sin corrección indicada |
| debian 11 | impacket | 0.9.22-2 |
| debian 12 | impacket | 0.9.22-2 |
| debian 13 | impacket | 0.9.22-2 |
| debian 14 | impacket | 0.9.22-2 |
| debian 9 | impacket | sin corrección indicada |
| echo | impacket | 0.9.22-2 |
Referencias
- https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161620832c1ec624/impacket/smbserver.py#L2008
- https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161620832c1ec624/impacket/smbserver.py#L2958
- https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161620832c1ec624/impacket/smbserver.py#L3485
- https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161620832c1ec624/impacket/smbserver.py#L876
- https://github.com/SecureAuthCorp/impacket/commit/49c643bf66620646884ed141c94e5fdd85bcdd2f
- https://github.com/SecureAuthCorp/impacket/commit/99bd29e3995c254e2d6f6c2e3454e4271665955a
- https://github.com/SecureAuthCorp/impacket/releases
- https://github.com/SecureAuthCorp/impacket/releases/tag/impacket_0_9_23
Las 18 referencias
- https://github.com/advisories/GHSA-mj63-64x7-57xf
- https://github.com/fortra/impacket
- https://github.com/pypa/advisory-database/tree/main/vulns/impacket/PYSEC-2021-17.yaml
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPXDPWCAPVX3UWYZ3N2T5OLBSBBUHJP6
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPXDPWCAPVX3UWYZ3N2T5OLBSBBUHJP6/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KRV2C5DATXBHG6TF6CEEX54KZ75THQS3
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KRV2C5DATXBHG6TF6CEEX54KZ75THQS3/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UF56LYB27LHEIFJTFHU3M75NMNNK2SCG
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UF56LYB27LHEIFJTFHU3M75NMNNK2SCG/
- https://nvd.nist.gov/vuln/detail/CVE-2021-31800