CVE-2013-7070

published 2019-12-31

CVE-2013-7070: The handle_request function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in…

Priority P2 64 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

The handle_request function in lib/HTTPServer.pm in Monitorix before 3.3.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the URI.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
fibranet	monitorix	< 3.3.1	3.3.1

Detection & IOCs extracted from sources · hover to see the quote

• → Remote attackers can execute arbitrary commands by injecting shell metacharacters in the URI handled by the handle_request function in lib/HTTPServer.pm ↗
• → The vulnerable code path is the handle_request() function in lib/HTTPServer.pm — monitor HTTP requests to this Monitorix built-in server for unsanitised/malicious URI strings containing shell metacharacters or JavaScript ↗
• → Attackers may inject arbitrary cookies via malicious request strings to the built-in HTTP server — monitor for anomalous Set-Cookie or cookie injection patterns in Monitorix HTTP traffic ↗

• · Vulnerability is fixed in Monitorix 3.3.1 (NVD) / 3.4.0 (Bugzilla); detections should focus on versions prior to 3.4.0 ↗

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 10.0 CRITICAL AV:N/AC:L/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-74