Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2020-24046

EPSS 3.56% · P88
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2020-24046

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A sandbox escape issue was discovered in TitanHQ SpamTitan Gateway 7.07. It limits the admin user to a restricted shell, allowing execution of a small number of tools of the operating system. This restricted shell can be bypassed after changing the properties of the user admin in the operating system file /etc/passwd. This file cannot be accessed though the restricted shell, but it can be modified by abusing the Backup/Import Backup functionality of the web interface. An authenticated attacker would be able to obtain the file /var/tmp/admin.passwd after executing a Backup operation. This file can be manually modified to change the GUID of the user to 0 (root) and change the restricted shell to a normal shell /bin/sh. After the modification is done, the file can be recompressed to a .tar.bz file and imported again via the Import Backup functionality. The properties of the admin user will be overwritten and a root shell will be granted to the user upon the next successful login.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Titan SpamTitan Gateway 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Spam Titan是一整套商业邮件安全解决方案该软件应用于防止电子邮件遭受病毒、垃圾邮件、网络钓鱼和不良内容的干扰。 Titan SpamTitan Gateway 7.07版本之前存在安全漏洞，攻击者可利用该漏洞获取root shell权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2020-24046

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-24046

请登录查看更多情报信息。

Same Patch Batch · n/a · 2020-09-17 · 130 CVEs total

CVE-2020-0308Google Android 信息泄露漏洞
CVE-2020-0346Google Android 输入验证错误漏洞
CVE-2020-0336Google Android 安全漏洞
CVE-2020-0306Google Android 安全漏洞
CVE-2020-0321Google Android 安全漏洞
CVE-2020-0303Google Android 资源管理错误漏洞
CVE-2020-0264Google Android 输入验证错误漏洞
CVE-2020-0426Google Android 访问控制错误漏洞
CVE-2020-0425Google Android 信息泄露漏洞
CVE-2020-0323Google Android 缓冲区错误漏洞
CVE-2020-0322Google Android 缓冲区错误漏洞
CVE-2020-0369Google Android 输入验证错误漏洞
CVE-2020-0372Google Android 安全漏洞
CVE-2020-0352Google Android SQL注入漏洞
CVE-2020-0343Google Android 安全漏洞
CVE-2020-0317Google Android 安全漏洞
CVE-2020-0312Google Android 信息泄露漏洞
CVE-2020-0277Google Android 权限许可和访问控制问题漏洞
CVE-2020-0130Google Android 输入验证错误漏洞
CVE-2020-0333Google Android 输入验证错误漏洞

Showing top 20 of 130 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2020-24046

No comments yet

Leave a comment