CVE-2021-35380 Scanner

Solari di Udine TermTalk Server (TTServer) is a software solution designed for remote interaction with Unix and Linux systems. Specifically, TTServer provides a secure, encrypted connection between a computer with a terminal emulator and a Unix or Linux server via the Telnet protocol. This server facilitates console management in environments where systems must be accessed remotely.

One of the latest vulnerabilities detected in TTServer is CVE-2021-35380. This flaw allows unauthenticated attackers to access any file on the remote system if they know the relative path of the desired file. An attacker can achieve this by sending HTTP requests with crafted parameters that trick the server into returning files outside of its intended directory structure. This vulnerability is caused by improper input validation and insufficient path sanitization in the code.

If an attacker exploits this vulnerability, they will be able to view or download sensitive files on the remote system. This can include files containing confidential data, such as log files, passwords, or configuration files. Additionally, an attacker may use this vulnerability to execute arbitrary code on the remote system, leading to a complete takeover of the server or the entire network the server is connected to.

It is important to understand the potential dangers of vulnerabilities such as CVE-2021-35380 so that measures can be taken to secure systems and protect sensitive data. By using the pro features of s4e.io, users can quickly and easily identify vulnerabilities in their digital assets and protect against potential attacks. Security should always be taken seriously, and preventative measures should be a top priority to keep networks and systems safe from malicious actors.

REFERENCES

• https://www.exploit-db.com/exploits/50638
• https://www.swascan.com/it/security-blog/
• https://www.swascan.com/solari-di-udine/