NVD Vulnerability Detail

CVE-2020-24045

Summary	A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. The restricted shell can be bypassed by presenting a fake vmware-tools ISO image to the guest virtual machine running SpamTitan Gateway. This ISO image should contain a valid Perl script at the vmware-freebsd-tools/vmware-tools-distrib/vmware-install.pl path. The fake ISO image will be mounted and the script wmware-install.pl will be executed with super-user privileges as soon as the hidden option to install VMware Tools is selected in the main menu of the restricted shell (option number 5). The contents of the script can be whatever the attacker wants, including a backdoor or similar.
Publication Date	Sept. 18, 2020, 2:15 a.m.
Registration Date	Jan. 26, 2021, 11:55 a.m.
Last Update	Nov. 21, 2024, 2:14 p.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:titanhq:spamtitan:7.07:::::::*

Related information, measures and tools

No	URL	タグ
1	https://github.com/felmoltor	Third Party Advisory
2	https://github.com/felmoltor	Third Party Advisory
3	https://sensepost.com/blog/2020/clash-of-the-spamtitan/	Exploit Third Party Advisory
4	https://sensepost.com/blog/2020/clash-of-the-spamtitan/	Exploit Third Party Advisory
5	https://twitter.com/felmoltor	Third Party Advisory
6	https://twitter.com/felmoltor	Third Party Advisory
7	https://www.titanhq.com/	Vendor Advisory
8	https://www.titanhq.com/	Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-345	データの信頼性についての不十分な検証	https://cwe.mitre.org/data/definitions/345.html

JVN Vulnerability Information

TitanHQ SpamTitan Gateway における権限管理に関する脆弱性

Title	TitanHQ SpamTitan Gateway における権限管理に関する脆弱性
Summary	TitanHQ SpamTitan Gateway には、権限管理に関する脆弱性が存在します。
Possible impacts	情報を取得される、情報を改ざんされる、およびサービス運用妨害 (DoS) 状態にされる可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	July 14, 2020, midnight
Registration Date	April 2, 2021, 3:35 p.m.
Last Update	April 2, 2021, 3:35 p.m.

Affected System

TitanHQ

SpamTitan 7.07

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2020-24045	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24045
National Vulnerability Database (NVD)
2	CVE-2020-24045	https://nvd.nist.gov/vuln/detail/CVE-2020-24045

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-269	https://cwe.mitre.org/data/definitions/269.html

ベンダー情報

No	Name	URL
TitanHQ
1	Top Page	https://www.titanhq.com

その他

No	Name	URL
関連文書
1	Clash of the (Spam)Titan	https://sensepost.com/blog/2020/clash-of-the-spamtitan/

Change Log

No	Changed Details	Date of change
1	[2021年04月02日] 掲載	April 2, 2021, 3:35 p.m.