Path Traversal Vulnerability in ZNC Package - CVE-2018-14056
Summary
ALPINE-CVE-2018-14056: ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories. Affects znc versions < 1.7.1-r0. Fixed in 1.7.1-r0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
ZNC is an advanced IRC bouncer that allows users to stay connected to IRC networks while they are offline. It provides features such as multiple user support, SSL encryption, and customizable web interfaces. However, prior to version 1.7.1-rc1, ZNC is susceptible to a path traversal vulnerability that can expose sensitive files outside the intended directories.
Vulnerability Detail
The vulnerability arises from improper handling of user input in the web skin name, allowing attackers to exploit the '..' sequence to traverse directories. This flaw can lead to unauthorized access to files on the server, potentially exposing sensitive information. The CVSS score for this vulnerability is 5.3, indicating a moderate severity level.
How To Fix
Minimum fixed version
1.7.1-r0
This is the first release that contains the fix.
sudo apk add --upgrade zncTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict access to the web interface or disable the web skin feature until the package is updated. This can be done by modifying the ZNC configuration file to disable the web module.
Conclusion
The path traversal vulnerability in ZNC (CVE-2018-14056) poses a risk of unauthorized file access. It is crucial to update to the patched version 1.7.1-r0 to mitigate this risk. Users should also consider temporary workarounds until the update can be applied.
See every vulnerability recorded for znc →
FAQ
ZNC is an IRC bouncer that allows users to maintain persistent connections to IRC networks, even when they are offline.
It allows attackers to access files outside the intended directories by exploiting the web skin name input.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability.
Consider restricting access to the web interface or disabling the web skin feature as a temporary measure.
The CVSS score for this vulnerability is 5.3, indicating a moderate severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for znc.
