SB2018081014 - DNS attack in mitmproxy
Published: August 10, 2018
Security Bulletin ID
SB2018081014
CSH Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) DNS attack (CVE-ID: CVE-2018-14505)
CWE-ID: CWE-20 - Improper input validation
CVSSv4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green
The vulnerability allows a remote attacker to conduct DNS attack.
The weakness exists due to insufficient protection against DNS rebinding in the mitmweb interface. A remote attacker can create a specially crafted website, set the
scripts config option, gain access to the sniffed data or run arbitrary Python scripts on the filesystem to manipulate DNS information.Remediation
Install update from vendor's website.