ArchLinuxASA-202005-15[ASA-202005-15] ant: arbitrary command execution
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS
Percentile
32.8%
Arch Linux Security Advisory ASA-202005-15
Severity: Medium
Date : 2020-05-20
CVE-ID : CVE-2020-1945
Package : ant
Type : arbitrary command execution
Remote : No
Link : https://security.archlinux.org/AVG-1159
Summary
The package ant before version 1.10.8-1 is vulnerable to arbitrary
command execution.
Resolution
Upgrade to 1.10.8-1.
pacman -Syu “ant>=1.10.8-1”
The problem has been fixed upstream in version 1.10.8.
Workaround
None.
Description
Apache Ant uses the default temporary directory identified by the Java
system property java.io.tmpdir for several tasks and may thus leak
sensitive information. The fixcrlf and replaceregexp tasks also copy
files from the temporary directory back into the build tree allowing an
attacker to inject modified source files into the build process.
Impact
A local malicious user can inject code into the ant build process.
References
https://lists.apache.org/thread.html/r8e592bbfc016a5dbe2a8c0e81ff99682b9c78c453621b82c14e7b75e%40<dev.ant.apache.org>
https://security.archlinux.org/CVE-2020-1945
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:P/A:N
CVSS3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS
Percentile
32.8%