CVE-2024-23749

KiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable, occurs due to insufficient input sanitization and validation, failure to escape special characters, and insecure system calls (at lines 2369-2390). This allows an attacker to add inputs inside the filename variable, leading to arbitrary code execution.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
http://packetstormsecurity.com/files/177031/KiTTY-0.76.1.13-Command-Injection.html	Exploit Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2024/Feb/13	Exploit Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2024/Feb/14	Exploit Mailing List Third Party Advisory
https://blog.defcesco.io/CVE-2024-23749	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:9bis:kitty:*:*:*:*:*:windows:*:*

History

No history.

Information

Published : 2024-02-09 08:15

Updated : 2024-02-14 13:59

NVD link : CVE-2024-23749

Mitre link : CVE-2024-23749

CVE.ORG link : CVE-2024-23749

JSON object : View

Products Affected

9bis

kitty

CWE

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

{"id": "CVE-2024-23749", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2024-02-09T08:15:08.530", "references": [{"url": "http://packetstormsecurity.com/files/177031/KiTTY-0.76.1.13-Command-Injection.html", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://seclists.org/fulldisclosure/2024/Feb/13", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://seclists.org/fulldisclosure/2024/Feb/14", "tags": ["Exploit", "Mailing List", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://blog.defcesco.io/CVE-2024-23749", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "KiTTY versions 0.76.1.13 and before is vulnerable to command injection via the filename variable, occurs due to insufficient input sanitization and validation, failure to escape special characters, and insecure system calls (at lines 2369-2390). This allows an attacker to add inputs inside the filename variable, leading to arbitrary code execution."}, {"lang": "es", "value": "Las versiones de KiTTY 0.76.1.13 y anteriores son vulnerables a la inyecci\u00f3n de comandos a trav\u00e9s de la variable de nombre de archivo, se produce debido a una sanitizaci\u00f3n y validaci\u00f3n de entrada insuficientes, no se pueden escapar caracteres especiales y llamadas inseguras al sistema (en las l\u00edneas 2369-2390). Esto permite a un atacante agregar entradas dentro de la variable de nombre de archivo, lo que lleva a la ejecuci\u00f3n de c\u00f3digo arbitrario."}], "lastModified": "2024-02-14T13:59:39.353", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:9bis:kitty:*:*:*:*:*:windows:*:*", "vulnerable": true, "matchCriteriaId": "8ACE5337-4545-4F4C-8406-2E201A9FA660", "versionEndIncluding": "0.76.1.13"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}