Vulnerability-Lookup

CNVD-2018-05551

Vulnerability from cnvd - Published: 2018-03-19

Title

Mailbutler Shimo权限提升漏洞

Description

Shimo是一款适用于Mac操作系统的多协议VPN客户端。 4.1.5.1之前的Mailbutler Shimo存在权限提升漏洞。该漏洞产生的原因是com.feingeist.shimo.helper tool LaunchDaemon实现一个不受保护的XPC服务。攻击者可利用该漏洞以root权限执行脚本。

Severity

高

Formal description

目前没有详细的解决方案提供： https://www.shimovpn.com/

Reference

https://github.com/VerSprite/research/blob/master/advisories/VS-2018-001.md

Impacted products

Name
Mailbutler Shimo <4.1.5.1(on macOS)

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-6823"
    }
  },
  "description": "Shimo\u662f\u4e00\u6b3e\u9002\u7528\u4e8eMac\u64cd\u4f5c\u7cfb\u7edf\u7684\u591a\u534f\u8baeVPN\u5ba2\u6237\u7aef\u3002\r\n\r\n4.1.5.1\u4e4b\u524d\u7684Mailbutler Shimo\u5b58\u5728\u6743\u9650\u63d0\u5347\u6f0f\u6d1e\u3002\u8be5\u6f0f\u6d1e\u4ea7\u751f\u7684\u539f\u56e0\u662fcom.feingeist.shimo.helper tool LaunchDaemon\u5b9e\u73b0\u4e00\u4e2a\u4e0d\u53d7\u4fdd\u62a4\u7684XPC\u670d\u52a1\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4ee5root\u6743\u9650\u6267\u884c\u811a\u672c\u3002",
  "discovererName": "unknown",
  "formalWay": "\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u7684\u89e3\u51b3\u65b9\u6848\u63d0\u4f9b\uff1a\r\nhttps://www.shimovpn.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-05551",
  "openTime": "2018-03-19",
  "products": {
    "product": "Mailbutler Shimo \u003c4.1.5.1(on macOS)"
  },
  "referenceLink": "https://github.com/VerSprite/research/blob/master/advisories/VS-2018-001.md",
  "serverity": "\u9ad8",
  "submitTime": "2018-02-08",
  "title": "Mailbutler Shimo\u6743\u9650\u63d0\u5347\u6f0f\u6d1e"
}

CVE-2018-6823 (GCVE-0-2018-6823)

Vulnerability from cvelistv5 – Published: 2018-02-07 16:00 – Updated: 2024-09-17 01:10

Summary

In the VPN client in Mailbutler Shimo before 4.1.5.1 on macOS, the com.feingeist.shimo.helper tool LaunchDaemon implements an unprotected XPC service that can be abused to execute scripts as root.

Severity

No CVSS data available.

CWE

Assigner

mitre

References

1 reference

URL	Tags
https://github.com/VerSprite/research/blob/master…	x_refsource_MISC

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T06:10:11.299Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/VerSprite/research/blob/master/advisories/VS-2018-001.md"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the VPN client in Mailbutler Shimo before 4.1.5.1 on macOS, the com.feingeist.shimo.helper tool LaunchDaemon implements an unprotected XPC service that can be abused to execute scripts as root."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-07T16:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/VerSprite/research/blob/master/advisories/VS-2018-001.md"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2018-6823",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "In the VPN client in Mailbutler Shimo before 4.1.5.1 on macOS, the com.feingeist.shimo.helper tool LaunchDaemon implements an unprotected XPC service that can be abused to execute scripts as root."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/VerSprite/research/blob/master/advisories/VS-2018-001.md",
              "refsource": "MISC",
              "url": "https://github.com/VerSprite/research/blob/master/advisories/VS-2018-001.md"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2018-6823",
    "datePublished": "2018-02-07T16:00:00.000Z",
    "dateReserved": "2018-02-07T00:00:00.000Z",
    "dateUpdated": "2024-09-17T01:10:32.235Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2018-05551

CVE-2018-6823 (GCVE-0-2018-6823)

Tags

Sightings

Nomenclature