CVE-2017-9736 SPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the host field, allowing a remote attacker to cause remote code execution.
CriticalCVSS 9.8
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SPIP 3.1.x before 3.1.6 and 3.2.x before Beta 3 does not remove shell metacharacters from the host field, allowing a remote attacker to cause remote code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/spip(Debian:13) | < 3.1.4-3 | 3.1.4-3 |
| debian/spip(Debian:14) | < 3.1.4-3 | 3.1.4-3 |
| SPIP | = 3.1.0 | No fix listed |
| SPIP | = 3.1.0-alpha | No fix listed |
| SPIP | = 3.1.0-beta | No fix listed |
| SPIP | = 3.1.0-rc | No fix listed |
| SPIP | = 3.1.0-rc2 | No fix listed |
| SPIP | = 3.1.0-rc3 | No fix listed |
| SPIP | = 3.1.1 | No fix listed |
| SPIP | = 3.1.2 | No fix listed |
| SPIP | = 3.1.3 | No fix listed |
| SPIP | = 3.1.4 | No fix listed |
| SPIP | = 3.1.5 | No fix listed |
| SPIP | = 3.2-alpha-1 | No fix listed |
| SPIP | = 3.2.0-beta | No fix listed |
| SPIP | = 3.2.0-beta2 | No fix listed |
References
- Debian Security Tracker CVE-2017-9736 vendor-advisory
- DSA-3890 vendor-advisory
- contrib.spip.net vendor-advisory
- core.spip.net patch vendor-advisory
- core.spip.net patch vendor-advisory
- bugs.debian.org issue-tracking