🇰🇷 한글 설명
htpasswd 유틸리티의 커맨드라인 인자에 포함된 셸 메타문자를 통해 로컬 사용자가 권한 상승 공격을 수행할 수 있는 취약점입니다. system() 함수로 전달되는 입력이 적절히 필터링되지 않아 임의의 명령어 실행이 가능하며, sudo 권한으로 실행되거나 원격 접근이 가능한 경우 특히 위험합니다.
💡 쉬운 설명
htpasswd is a password management tool. Attackers can inject shell commands through its arguments to execute unauthorized code if run with elevated permissions.
🇺🇸 원문 (English)
htpasswd, as used in Acme thttpd 2.25b and possibly other products such as Apache, might allow local users to gain privileges via shell metacharacters in a command line argument, which is used in a call to the system function. NOTE: since htpasswd is normally installed as a non-setuid program, and the exploit is through command line options, perhaps this issue should not be included in CVE. However, if there are some typical or recommended configurations that use htpasswd with sudo privileges, or common products that access htpasswd remotely, then perhaps it should be included.
📍 영향받는 시스템
Acme thttpd 2.25b, Apache httpd, and other products using htpasswd utility
⚔️ 공격 벡터
Local privilege escalation via shell metacharacter injection in htpasswd command arguments passed to system() function
🛡️ 대응 방법
Update affected packages to patched versions; restrict htpasswd sudo access; implement input validation and sanitization
🔧 검증 코드
Shows installed versions of Apache/thttpd packages; if version pre-dates 2006, apply security patches immediately
dpkg -l 2>/dev/null | grep -E 'apache2|thttpd|httpd' | awk '{print $2, $3}'