CVE-2019-9859: OS Command Injection
First published: Tue Mar 10 2020(Updated: )
Vesta Control Panel (VestaCP) 0.9.7 through 0.9.8-23 is vulnerable to an authenticated command execution that can result in remote root access on the server. The platform works with PHP as the frontend language and uses shell scripts to execute system actions. PHP executes shell script through the dangerous command exec. This function can be dangerous if arguments passed to it are not filtered. Every user input in VestaCP that is used as an argument is filtered with the escapeshellarg function. This function comes from the PHP library directly and its description is as follows: "escapeshellarg() adds single quotes around a string and quotes/escapes any existing single quotes allowing you to pass a string directly to a shell function and having it be treated as a single safe argument." It means that if you give Username, it will have 'Username' as a replacement. This works well and protects users from exploiting this potentially dangerous exec function. Unfortunately, VestaCP uses this escapeshellarg function incorrectly in several places.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Vestacp Vesta Control Panel | >=0.9.7-0<=0.9.8-23 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability CVE-2019-9859 in Vesta Control Panel?
The vulnerability CVE-2019-9859 in Vesta Control Panel is an authenticated command execution that can result in remote root access on the server.
What is the severity of CVE-2019-9859?
The severity of CVE-2019-9859 is critical with a CVSS score of 8.8.
How does the vulnerability CVE-2019-9859 in Vesta Control Panel work?
The vulnerability CVE-2019-9859 in Vesta Control Panel allows an attacker with authenticated access to execute commands on the server, potentially gaining remote root access.
How can I fix the vulnerability CVE-2019-9859 in Vesta Control Panel?
To fix the vulnerability CVE-2019-9859 in Vesta Control Panel, it is recommended to update to a version higher than 0.9.8-23.
Are there any references for CVE-2019-9859 in Vesta Control Panel?
Yes, you can find more information about CVE-2019-9859 in Vesta Control Panel at the following link: [https://ssd-disclosure.com/?p=3926](https://ssd-disclosure.com/?p=3926).
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/tags
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/softwarecombine
- vendor/vestacp
- canonical/vestacp vesta control panel
- version/vestacp vesta control panel/0.9.7-0
- version/vestacp vesta control panel/0.9.8-23