Shemes GrabIt up to 1.7.2 ßeta 4 NZB Date Parser denial of service

Summaryinfo

A vulnerability classified as problematic has been found in Shemes GrabIt up to 1.7.2 ßeta 4. The impacted element is an unknown function of the component NZB Date Parser. Performing a manipulation of the argument Date with the input 1000000000000000 as part of NZB File results in denial of service. This vulnerability was named CVE-2010-10001. The attack may be initiated remotely. In addition, an exploit is available. It is recommended to replace the affected component with an alternative.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Shemes GrabIt up to 1.7.2 ßeta 4. This affects some unknown processing of the component NZB Date Parser. The manipulation of the argument date with the input value 1000000000000000 leads to a denial of service vulnerability. CWE is classifying the issue as CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. This is going to have an impact on availability.

The bug was discovered 02/20/2010. The weakness was presented 07/08/2010 by Marc Ruef with scip AG as VulDB 4143 as not defined bulletin (Website). It is possible to read the advisory at scip.ch. The public release was coordinated in cooperation with Shemes. This vulnerability is uniquely identified as CVE-2010-10001. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details and a public exploit are known. The attack technique deployed by this issue is T1499 according to MITRE ATT&CK. During the import of the malicious nzb file the application will freeze. Further interaction with the software is not possible anymore. Ongoing downloads will be corrupted or lost. It is required to kill the process and to re-launch the application.

A public exploit has been developed by Marc Ruef in NZB File and been published immediately after the advisory. The exploit is shared for download at vuldb.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 138 days. During that time the estimated underground price was around $0-$5k.

Upgrading eliminates this vulnerability. The upgrade is hosted for download at shemes.com. The problem might be mitigated by replacing the product with SABnzbd as an alternative. The best possible mitigation is suggested to be establishing an alternative product.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 41505†). Further details are available at seclists.org. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Vendor

• Shemes

Name

• GrabIt

Version

• 1.7.2 ßeta 4

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion