CVE-2021-41067

An issue was discovered in Listary through 6. Improper implementation of the update process leads to the download of software updates with a /check-update HTTP-based connection. This can be exploited with MITM techniques. Together with the lack of package validation, it can lead to manipulation of update packages that can cause an installation of malicious content.

CVSS v3 7.5 HIGH
CVSS v2.0 7.6 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.6 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.6^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability : 4.9 / Impact : 10.0

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://medium.com/%40tomerp_77017/exploiting-listary-searching-your-way-to-system-privileges-8175af676c3e
https://www.listary.com/download	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:listary:listary:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-12-14 16:15

Updated : 2023-11-07 03:38

NVD link : CVE-2021-41067

Mitre link : CVE-2021-41067

CVE.ORG link : CVE-2021-41067

JSON object : View

Products Affected

listary

listary

CWE

CWE-354

Improper Validation of Integrity Check Value

{"id": "CVE-2021-41067", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.6, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "HIGH", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.6}]}, "published": "2021-12-14T16:15:09.103", "references": [{"url": "https://medium.com/%40tomerp_77017/exploiting-listary-searching-your-way-to-system-privileges-8175af676c3e", "source": "cve@mitre.org"}, {"url": "https://www.listary.com/download", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-354"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Listary through 6. Improper implementation of the update process leads to the download of software updates with a /check-update HTTP-based connection. This can be exploited with MITM techniques. Together with the lack of package validation, it can lead to manipulation of update packages that can cause an installation of malicious content."}, {"lang": "es", "value": "Se ha detectado un problema en Listary versiones hasta 6. La implementaci\u00f3n inapropiada del proceso de actualizaci\u00f3n conduce a la descarga de actualizaciones de software con una conexi\u00f3n basada en HTTP /check-update. Esto puede ser explotado con t\u00e9cnicas de tipo MITM. Junto con la falta de comprobaci\u00f3n de paquetes, puede llevar a la manipulaci\u00f3n de los paquetes de actualizaci\u00f3n que puede causar una instalaci\u00f3n de contenido malicioso"}], "lastModified": "2023-11-07T03:38:48.810", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:listary:listary:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EAE1DA9A-E743-47E1-AB4E-4BBD974DBE20", "versionEndIncluding": "6"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}