DNS Rebinding Vulnerability in Shell In A Box (CVE-2015-8400)
Summary
CVE-2015-8400: The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers to conduct DNS rebinding attacks via the "/plain" URL. Affects shellinabox versions < 2.19. Fixed in 2.19. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Shell In A Box is a web-based terminal emulator that allows users to access shell sessions through a web browser. It provides a convenient way to manage remote servers and execute commands securely. However, prior to version 2.19, it was found to be vulnerable to a DNS rebinding attack, which could compromise the security of users' sessions.
Vulnerability Detail
The vulnerability arises from the HTTPS fallback implementation in Shell In A Box before version 2.19. This flaw allows remote attackers to exploit DNS rebinding techniques, potentially redirecting users to malicious sites while they believe they are interacting with a legitimate service. The consequences of this vulnerability can include unauthorized access to sensitive data and the execution of arbitrary commands on the user's system.
How To Fix
Minimum fixed version
2.19
This is the first release that contains the fix.
sudo apt-get install --only-upgrade shellinaboxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading is not immediately possible, consider disabling the HTTPS fallback feature or restricting access to the Shell In A Box service to trusted IP addresses only. This can help mitigate the risk until a proper update can be applied.
Conclusion
The DNS rebinding vulnerability in Shell In A Box (CVE-2015-8400) poses significant risks to users who have not upgraded to version 2.19 or later. It is crucial to apply the necessary updates or implement workarounds to safeguard against potential attacks.
See every vulnerability recorded for shellinabox →
FAQ
CVE-2015-8400 is a vulnerability in Shell In A Box that allows DNS rebinding attacks, potentially compromising user sessions.
You can check your version by running 'shellinaboxd -v' in your terminal. If it is below 2.19, it is vulnerable.
The risks include unauthorized access to sensitive data and the ability for attackers to execute commands on the user's system.
Yes, tools like Vulert can monitor your application for open-source vulnerabilities in real-time using a manifest file.
More information can be found on the official CVE website or by visiting the Vulert playground at Vulert Scanner.
Related vulnerabilities
Recent vulnerabilities recorded for shellinabox.
