Apache Bug Lets Normal Users Gain Root Access Via Scripts

guest · Apr 2, 2019

Apache Bug Lets Normal Users Gain Root Access Via Scripts
April 2, 2019
https://www.bleepingcomputer.com/ne...ts-normal-users-gain-root-access-via-scripts/

A privilege escalation vulnerability of important severity in the Apache HTTP server allowing users with the right to write and run scripts to gain root on Unix systems was fixed in Apache httpd 2.4.39.

As detailed in the changelog, tracked as CVE-2019-0211, impacts all Apache HTTP Server releases from 2.4.17 to 2.4.38 and it makes it possible to execute arbitrary code via scoreboard manipulation.

Flaw in Apache HTTP Server 2.4.17 - 2.4.38 allows anyone you allow to write a script (PHP, CGI,..) to gain root. Get 2.4.39 *now* especially if you have untrusted script authors or run shared hosting (or use mod_auth_digest, due to a separate flaw) https://t.co/s08XhOzKKW
— Mark J Cox (@iamamoose) April 2, 2019
Especially dangerous in shared hosting environments
Also, as Cox further detailed, users with limited permissions on the server would be able to elevate their privileges using scripts making it possible to run commands on vulnerable Apache web servers as root.
Click to expand...

guest · Apr 5, 2019

Apache HTTP Server Privilege Escalation (CVE-2019-0211): What You Need to Know
April 3, 2019
https://blog.rapid7.com/2019/04/03/...calation-cve-2019-0211-what-you-need-to-know/

This privilege escalation bug is especially problematic for hosting providers that still offer “shared web hosting” plans where a site is running alongside other ones, all of them sharing the same parent Apache server. Even if a vulnerable Apache server is running on its own, this flaw could be used in combination with other attack methods to execute code at a higher privilege level.
How prevalent is the Apache HTTP Server Privilege Escalation vulnerability?
We found roughly 2 million distinct systems vulnerable to CVE-2019-0211 in our most recent HTTP scans, with 50% of them residing in the “usual suspects” (big cloud-hosting providers).
The bulk of affected systems are in the United States (~770,000), Germany (~224,000), and France (~111,000).

While this is not a remote code execution (RCE) vulnerability, it does provide a vehicle for attackers to perform actions most hosting providers have worked to avoid. Organizations should consider applying Apache’s fix as soon as possible.
Click to expand...

guest · Apr 9, 2019

PoC exploit for Carpe Diem Apache bug released
April 9, 2019
https://www.helpnetsecurity.com/2019/04/09/apache-cve-2019-0211-exploit/

Charles Fol, the security engineer that unearthed the Carpe Diem Apache HTTP Server bug (CVE-2019-0211), has released an exploit for it.

“This is between a POC and a proper exploit. I added tons of comments, it is meant to be educational as well,” he noted, but added that it “might fail for a dozen of reasons.”
Still, it might help attackers to create a more stable one and deploy it in attacks, so admins – and especially those administrating shared hosting environments – would do well to plug the hole if they haven’t already.
About CVE-2019-0211
CVE-2019-0211 and several other vulnerabilities have been patched in Apache HTTP Server v2.4.39, which was released on April 1.

As Mark Cox, one of the founders of the Apache Software Foundation, pointed out, it is “common to give unprivileged users the ability to write their own scripts (common in shared hosting, but also other environments) and this would allow them to get root.”
Click to expand...

Log in or Sign up

Apache Bug Lets Normal Users Gain Root Access Via Scripts

guest Guest

guest Guest

guest Guest

Log in or Sign up

Apache Bug Lets Normal Users Gain Root Access Via Scripts

guest Guest

guest Guest

guest Guest

Useful Searches