Apache Ant Arbitrary File Overwrite Vulnerability [CVE-2018-10886]
CVE number – CVE-2018-10886
A vulnerability in Apache Ant could allow an unauthenticated, remote attacker to create or overwrite arbitrary files on a targeted system.
The vulnerability exists because the affected software allows archive files to be extracted outside of the target directory. An attacker could exploit this vulnerability by submitting a crafted ZIP or TAR archive to an Ant build. If a user extracts the malicious ZIP or TAR archive, a file could be created outside the current working directory on the system. The attacker could use the extracted file to create or overwrite arbitrary files on the system.
Apache has confirmed the vulnerability and released software updates.
-
To exploit the vulnerability, the attacker may use misleading language and instructions to persuade a user to extract a malicious ZIP or TAR archive on the targeted system.
-
Administrators are advised to apply the appropriate updates.
Administrators are advised to allow only trusted users to have network access.
Users are advised not to open email messages from suspicious or unrecognized sources. If users cannot verify that links or attachments included in email messages are safe, they are advised not to open them.
Users are advised not to visit websites or follow links that have suspicious characteristics or cannot be verified as safe.
Administrators are advised to use an unprivileged account when browsing the Internet.
Administrators are advised to monitor critical systems.
-
Apache has released git commits at the following links: commit e56e54565804991c62ec76dad385d2bdda8972a7 and commit 857095da5153fd18504b46f276d84f1e76a66970
-
Apache has released software updates at the following link: Ant 1.9.12 or later
Duncan is a technology professional with over 20 years experience of working in various IT roles. He has a interest in cyber security, and has a wide range of other skills in radio, electronics and telecommunications.