{"vulnerability": "cve-2020-8617", "sightings": [{"uuid": "08bfcd50-c624-430b-a8ca-1f638bb27506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8617", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "64a519c0-b36d-49b8-b3f2-5911dc57f2c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8617", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:31.000000Z"}, {"uuid": "cec8be34-2b5b-4f4d-9acd-d4ae47d67a78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8617", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/dns/bind_tsig_badtime.rb", "content": "", "creation_timestamp": "2020-05-26T16:34:50.000000Z"}, {"uuid": "f4037210-08a7-41d4-b12a-e4eda5eaa845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2020-8617", "type": "seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/kaksi-haavoittuvuutta-isc-bind-9-nimipalvelimessa", "content": "", "creation_timestamp": "2020-05-22T07:53:40.000000Z"}, {"uuid": "a2b4e4c8-1ee8-47df-a3a9-0bd6b1911f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8617", "type": "seen", "source": "https://t.me/CyberSecurityTechnologies/1189", "content": "#exploit\n1. DotNetNuke Web Content Management System <9.3.0-RC - RCE through DNN Cookie Deserialization\nhttps://vulners.com/hackerone/H1:876708\n\n2. CVE-2020-8617:\nAn error in BIND (9.0.0-9.11.18, 9.12.0-9.12.4-P2, 9.14.0-9.14.11, 9.16.0-9.16.2, 9.17.0-9.17.1, all releases in 9.13 and 9.15 development branches, 9.9.3-S1-9.11.18-S1) which checks the validity of messages containing TSIG resource records can be exploited by an attacker to trigger an assertion failure in tsig.c, resulting in DoS\nhttps://packetstormsecurity.com/files/157836/bindtsig-dos.txt\n]-> BIND 9 Security Vulnerability Matrix:\nhttps://kb.isc.org/docs/aa-00913", "creation_timestamp": "2024-10-24T18:06:56.000000Z"}, {"uuid": "50dbee0e-3ec1-4356-9e45-536ef6f5abc6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8617", "type": "seen", "source": "https://t.me/cissp/729", "content": "This is a list of recent vulnerabilities for which exploits are available. System administrators can use this list to help in prioritization of their remediation activities.  ID: CVE-2020-0096 Title: Google Android Elevation of Privilege Vulnerability Vendor: Google Description: Android is a mobile operating system based on a modified version of the Linux kernel and other open source software, designed primarily for touchscreen mobile devices such as smartphones and tablets. In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed.   CVSS v3 Base Score: 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-9484 Title: Apache Tomcat Remote Code Execution Vulnerability Vendor: Apache Description: When using Apache Tomcat versions if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed. CVSS v3 Base Score: 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-1048 Title: Microsoft Windows Print Spooler Elevation of Privilege Vulnerability Vendor: Microsoft Description: An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. CVSS v3 Base Score: 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-3153 Title: Cisco AnyConnect Secure Mobility Client Vulnerability Vendor: Cisco Description: A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. An exploit could allow the attacker to copy malicious files to arbitrary locations with system level privileges.  CVSS v3 Base Score: 6.5 (AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N)  ID: CVE-2020-8617 Title: ISC BIND Denial of Service Vulnerability Vendor: Multi-Vendor Description: Using a specially crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. A remote attacker could use this issue to cause Bind to crash, resulting in a denial of service, or possibly perform other attacks. CVSS v3 Base Score: 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)  ID: CVE-2019-7192 Title: QNAP Pre-Auth Root Remote  \ud83d\ude10Code Execution Vulnerability Vendor: Qnap Description: QTS (QNAP Turbo NAS System) is a Turbo NAS Operating System, providing file storage, backup, disaster recovery, security management and virtualization applications for businesses; multimedia applications. This improper access control vulnerability allows remote attackers to gain unauthorized access to the system.  CVSS v3 Base Score: 9.", "creation_timestamp": "2026-09-01T17:01:16.462874Z"}, {"uuid": "ed8539b7-cf03-49e4-ad09-14f405256597", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-8617", "type": "seen", "source": "https://t.me/cissp/729", "content": "This is a list of recent vulnerabilities for which exploits are available. System administrators can use this list to help in prioritization of their remediation activities.  ID: CVE-2020-0096 Title: Google Android Elevation of Privilege Vulnerability Vendor: Google Description: Android is a mobile operating system based on a modified version of the Linux kernel and other open source software, designed primarily for touchscreen mobile devices such as smartphones and tablets. In startActivities of ActivityStartController.java, there is a possible escalation of privilege due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed.   CVSS v3 Base Score: 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-9484 Title: Apache Tomcat Remote Code Execution Vulnerability Vendor: Apache Description: When using Apache Tomcat versions if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; and c) the PersistenceManager is configured with sessionAttributeValueClassNameFilter=\"null\" (the default unless a SecurityManager is used) or a sufficiently lax filter to allow the attacker provided object to be deserialized; and d) the attacker knows the relative file path from the storage location used by FileStore to the file the attacker has control over; then, using a specifically crafted request, the attacker will be able to trigger remote code execution via deserialization of the file under their control. Note that all of conditions a) to d) must be true for the attack to succeed. CVSS v3 Base Score: 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-1048 Title: Microsoft Windows Print Spooler Elevation of Privilege Vulnerability Vendor: Microsoft Description: An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. CVSS v3 Base Score: 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)  ID: CVE-2020-3153 Title: Cisco AnyConnect Secure Mobility Client Vulnerability Vendor: Cisco Description: A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths. An attacker could exploit this vulnerability by creating a malicious file and copying the file to a system directory. An exploit could allow the attacker to copy malicious files to arbitrary locations with system level privileges.  CVSS v3 Base Score: 6.5 (AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N)  ID: CVE-2020-8617 Title: ISC BIND Denial of Service Vulnerability Vendor: Multi-Vendor Description: Using a specially crafted message, an attacker may potentially cause a BIND server to reach an inconsistent state if the attacker knows (or successfully guesses) the name of a TSIG key used by the server. Since BIND, by default, configures a local session key even on servers whose configuration does not otherwise make use of it, almost all current BIND servers are vulnerable. A remote attacker could use this issue to cause Bind to crash, resulting in a denial of service, or possibly perform other attacks. CVSS v3 Base Score: 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)  ID: CVE-2019-7192 Title: QNAP Pre-Auth Root Remote  \ud83d\ude10Code Execution Vulnerability Vendor: Qnap Description: QTS (QNAP Turbo NAS System) is a Turbo NAS Operating System, providing file storage, backup, disaster recovery, security management and virtualization applications for businesses; multimedia applications. This improper access control vulnerability allows remote attackers to gain unauthorized access to the system.  CVSS v3 Base Score: 9.", "creation_timestamp": "2026-09-02T01:05:05.336749Z"}]}