Signature Detail

HTTP: ManageEngine DesktopCentral AgentLogUpload Arbitrary File Upload

This signature detects attempts to exploit a known vulnerability in ManageEngine DesktopCentral. The vulnerability is due to lack of authentication and insufficient input validation in the AgentLogUploadServlet.class when processing HTTP requests. A remote unauthenticated attacker can upload arbitrary files to arbitrary locations. In a successful attack scenario,the attacker can execute arbitrary code with SYSTEM privileges by placing executable files in critical locations.

Extended Description

Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before build 80293 allows remote attackers to execute arbitrary code by uploading a file with a jsp extension, then accessing it via a direct request to the file in the webroot.

Affected Products

• Zohocorp manageengine_desktop_central 7.0.0
• Zohocorp manageengine_desktop_central 7.0.1
• Zohocorp manageengine_desktop_central 8.0.0

References

• BugTraq: 63784
• CVE: CVE-2013-7390
• URL: http://security-assessment.com/files/documents/advisory/Desktop%20Central%20Arbitrary%20File%20Upload.pdf
• URL: http://seclists.org/fulldisclosure/2013/Nov/130