cnvd - cnvd-2015-07767

CNVD-2015-07767

Vulnerability from cnvd - Published: 2015-11-25

Title

Tibbo Technology AggreGate权限提升漏洞

Description

Tibbo Technology AggreGate是集博（Tibbo Technology）公司的一套通过先进的网络技术来控制、配置、监控和服务不同的电子装置的物联网集成平台。 Tibbo Technology AggreGate 5.30.06之前版本的AggreGate Server Service中的ag_server_service.exe文件存在安全漏洞。本地攻击者可通过使用‘deployment’方法定义一个公共类利用该漏洞以SYSTEM权限执行任意Java代码。

Severity

高

Patch Name

Tibbo Technology AggreGate权限提升漏洞的补丁

Patch Description

Formal description

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： http://aggregate.tibbo.com/downloads.html

Reference

http://zerodayinitiative.com/advisories/ZDI-15-572/ https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01

Impacted products

Name
Tibbo Technology AggreGate Platform < 5.30.06

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-7913"
    }
  },
  "description": "Tibbo Technology AggreGate\u662f\u96c6\u535a\uff08Tibbo Technology\uff09\u516c\u53f8\u7684\u4e00\u5957\u901a\u8fc7\u5148\u8fdb\u7684\u7f51\u7edc\u6280\u672f\u6765\u63a7\u5236\u3001\u914d\u7f6e\u3001\u76d1\u63a7\u548c\u670d\u52a1\u4e0d\u540c\u7684\u7535\u5b50\u88c5\u7f6e\u7684\u7269\u8054\u7f51\u96c6\u6210\u5e73\u53f0\u3002\r\n\r\nTibbo Technology AggreGate 5.30.06\u4e4b\u524d\u7248\u672c\u7684AggreGate Server Service\u4e2d\u7684ag_server_service.exe\u6587\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u4f7f\u7528\u2018deployment\u2019\u65b9\u6cd5\u5b9a\u4e49\u4e00\u4e2a\u516c\u5171\u7c7b\u5229\u7528\u8be5\u6f0f\u6d1e\u4ee5SYSTEM\u6743\u9650\u6267\u884c\u4efb\u610fJava\u4ee3\u7801\u3002",
  "discovererName": "rgod",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttp://aggregate.tibbo.com/downloads.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-07767",
  "openTime": "2015-11-25",
  "patchDescription": "Tibbo Technology AggreGate\u662f\u96c6\u535a\uff08Tibbo Technology\uff09\u516c\u53f8\u7684\u4e00\u5957\u901a\u8fc7\u5148\u8fdb\u7684\u7f51\u7edc\u6280\u672f\u6765\u63a7\u5236\u3001\u914d\u7f6e\u3001\u76d1\u63a7\u548c\u670d\u52a1\u4e0d\u540c\u7684\u7535\u5b50\u88c5\u7f6e\u7684\u7269\u8054\u7f51\u96c6\u6210\u5e73\u53f0\u3002\r\n\r\nTibbo Technology AggreGate 5.30.06\u4e4b\u524d\u7248\u672c\u7684AggreGate Server Service\u4e2d\u7684ag_server_service.exe\u6587\u4ef6\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u672c\u5730\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u4f7f\u7528\u2018deployment\u2019\u65b9\u6cd5\u5b9a\u4e49\u4e00\u4e2a\u516c\u5171\u7c7b\u5229\u7528\u8be5\u6f0f\u6d1e\u4ee5SYSTEM\u6743\u9650\u6267\u884c\u4efb\u610fJava\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Tibbo Technology AggreGate\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Tibbo Technology AggreGate Platform \u003c 5.30.06"
  },
  "referenceLink": "http://zerodayinitiative.com/advisories/ZDI-15-572/\r\nhttps://ics-cert.us-cert.gov/advisories/ICSA-15-323-01",
  "serverity": "\u9ad8",
  "submitTime": "2015-11-24",
  "title": "Tibbo Technology AggreGate\u6743\u9650\u63d0\u5347\u6f0f\u6d1e"
}

CVE-2015-7913 (GCVE-0-2015-7913)

Vulnerability from cvelistv5 – Published: 2015-11-21 11:00 – Updated: 2024-08-06 08:06

Summary

ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows local users to execute arbitrary Java code with SYSTEM privileges by using the Apache Axis AdminService deployment method to publish a class.

Severity ?

No CVSS data available.

CWE

Assigner

icscert

References

URL

Tags

	http://zerodayinitiative.com/advisories/ZDI-15-572/	x_refsource_MISC
	https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T08:06:30.978Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://zerodayinitiative.com/advisories/ZDI-15-572/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-11-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows local users to execute arbitrary Java code with SYSTEM privileges by using the Apache Axis AdminService deployment method to publish a class."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2015-11-21T03:57:01",
        "orgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
        "shortName": "icscert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://zerodayinitiative.com/advisories/ZDI-15-572/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "ics-cert@hq.dhs.gov",
          "ID": "CVE-2015-7913",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows local users to execute arbitrary Java code with SYSTEM privileges by using the Apache Axis AdminService deployment method to publish a class."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://zerodayinitiative.com/advisories/ZDI-15-572/",
              "refsource": "MISC",
              "url": "http://zerodayinitiative.com/advisories/ZDI-15-572/"
            },
            {
              "name": "https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01",
              "refsource": "MISC",
              "url": "https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "7d14cffa-0d7d-4270-9dc0-52cabd5a23a6",
    "assignerShortName": "icscert",
    "cveId": "CVE-2015-7913",
    "datePublished": "2015-11-21T11:00:00",
    "dateReserved": "2015-10-22T00:00:00",
    "dateUpdated": "2024-08-06T08:06:30.978Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2015-07767

CVE-2015-7913 (GCVE-0-2015-7913)

Tags

Sightings

Nomenclature