Race condition

An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method /api/updatesetup does not perform firmware signature checks atomically, leading to an exploitable race condition TOCTTOU that allows arbitrary execution of system...

Design/Logic Flaw

An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total Security versions prior to 24.0.12.69...

CVE-2019-17103 Get-task-allow entitlement via BDLDaemon on macOS

An Incorrect Default Permissions vulnerability in the BDLDaemon component of Bitdefender AV for Mac allows an attacker to elevate permissions to read protected directories. This issue affects: Bitdefender AV for Mac versions prior to 8.0.0...

CVE-2019-17103

CVE-2019-17103 concerns an Incorrect Default Permissions issue in the BDLDaemon component of Bitdefender AV for Mac, enabling an attacker to elevate privileges to read protected directories. Affected software: Bitdefender AV for Mac, prior to version 8.0.0. Root cause: incorrect default permissio...

CVE-2019-17102 Bitdefender BOX v2 bootstrap update_setup command execution vulnerability (VA-2226)

An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method /api/updatesetup does not perform firmware signature checks atomically, leading to an exploitable race condition TOCTTOU that allows arbitrary execution of system...

CVE-2019-17102

The CVE-2019-17102 issue affects Bitdefender BOX 2 bootstrapping. A TOCTTOU race condition arises in the update_setup flow: POST requests to /api/update_setup acquire an atomic lock, but the parallel forked update_setup runs install_full_ws after extracting a signed full_ws.tar.gz. An attacker ca...

CVE-2019-17100 Untrusted Search Path vulnerability in Bitdefender Total Security 2020 (VA-5895)

An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total Security versions prior to 24.0.12.69...

CVE-2019-17100

The CVE-2019-17100 entry describes an Untrusted Search Path vulnerability in bdserviceshost.exe used by Bitdefender Total Security 2020 . The issue could allow an attacker to execute arbitrary code, via a local attack vector, on affected installations. The vulnerability does not affect Bitdefende...

CVE-2019-17102: Improper Resource Locking

An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method /api/updatesetup does not perform firmware signature checks atomically, leading to an exploitable race condition TOCTTOU that allows arbitrary execution of system...

PT-2020-9872

Name of the Vulnerable Software and Affected Versions Bitdefender Total Security versions 24.0.12.69 and later Description An Untrusted Search Path issue in bdserviceshost.exe allows an attacker to execute arbitrary code. Recommendations For Bitdefender Total Security versions 24.0.12.69 and late...

PT-2020-9874

Name of the Vulnerable Software and Affected Versions Bitdefender BOX 2 versions prior to 2.1.47.36 Description An exploitable command execution issue exists in the recovery partition due to a race condition in the /api/update setup API endpoint. This allows arbitrary execution of system commands...

PT-2020-9869

Name of the Vulnerable Software and Affected Versions Bitdefender BOX 2 affected versions not specified Description A OS Command Injection issue allows the manipulation of the get image url function in special circumstances to inject a system command. Recommendations At the moment, there is no...

PT-2020-9875

Name of the Vulnerable Software and Affected Versions Bitdefender AV for Mac versions prior to 8.0.0 Description The issue is related to incorrect default permissions in the BDLDaemon component, allowing an attacker to elevate permissions and read protected directories. Recommendations For versio...

PT-2020-9871

Name of the Vulnerable Software and Affected Versions Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 Description The issue is related to an Untrusted Search Path vulnerability in EPSecurityService.exe, which allows an attacker to load an arbitrary DLL file from the search path...

CVE-2019-17099: Untrusted Search Path

An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker to load an arbitrary DLL file from the search path. This issue affects: Bitdefender EPSecurityService.exe versions prior to 6.6.11.163...

CVE-2019-17095: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability has been discovered in the bootstrap stage of Bitdefender BOX 2, versions 2.1.47.42 and 2.1.53.45. The API method /api/downloadimage unsafely handles the production firmware URL supplied by remote servers, leading to arbitrary execution of system commands. In ord...

CVE-2019-17103: Incorrect Default Permissions

An Incorrect Default Permissions vulnerability in the BDLDaemon component of Bitdefender AV for Mac allows an attacker to elevate permissions to read protected directories. This issue affects: Bitdefender AV for Mac versions prior to 8.0.0...

CVE-2019-17100: Untrusted Search Path

An Untrusted Search Path vulnerability in bdserviceshost.exe as used in Bitdefender Total Security 2020 allows an attacker to execute arbitrary code. This issue does not affect: Bitdefender Total Security versions prior to 24.0.12.69...

Vulnerability Spotlight: Bitdefender BOX 2 bootstrap remote code execution vulnerabilities

Claudio Bozzato, Lilith Wyatt and Dave McDaniel of Cisco Talos discovered these vulnerabilities. Blog by Jon Munshaw. The Bitdefender BOX 2 contains two remote code execution vulnerabilities in its bootstrap stage. The BOX 2 is a device that protects users’ home networks from a variety of threats...

PT-2020-1545

Name of the Vulnerable Software and Affected Versions Bitdefender BOX 2 versions 2.1.47.42 through 2.1.53.45 Description A command injection issue has been found in the bootstrap stage of the affected software. The /api/download image API method unsafely handles the production firmware URL suppli...