CVE-2016-9299 - Remote Code Execution via Unsafe Deserialization

[princechaddha]

Is there an existing template for this?

• I have searched the existing templates.

Template requests

Description:
The remoting module in Jenkins prior to version 2.32 and LTS before 2.19.3 allows remote attackers to execute arbitrary code by sending a crafted serialized Java object. This vulnerability triggers an LDAP query to a third-party server, enabling remote code execution.

Severity: Critical

POC:

• https://github.com/r00t4dm/Jenkins-CVE-2016-9299

References:

• OpenWall Discussion 1
• OpenWall Discussion 2
• SecurityFocus BID 94281
• Code White Presentation
• Jenkins Security Advisory 2016-11-16
• CloudBees Advisory

Shodan Query: http.favicon.hash:81586312

CPE:
cpe:2.3:a:jenkins:jenkins:::::lts:::*
cpe:2.3:a:jenkins:jenkins:::::-:::*
cpe:2.3:o:fedoraproject:fedora:25:::::::*

Anything else?

No response

[princechaddha]

/bounty $200

[algora-pbc]

💎 $200 bounty • ProjectDiscovery Bounty Available for CVE Template Contribution

Steps to Contribute:

• Claim attempt: Comment /attempt #10894 on this issue to claim attempt.
• Write the Template: Create a high-quality Nuclei template for the specified CVE, following our Contribution Guidelines and Acceptance Criteria.
• Submit the Template: Open a pull request (PR) to projectdiscovery/nuclei-templates and include /claim #10894 in the PR body to claim the bounty.
• Receive Payment: Upon successful merge of your PR, you will receive 100% of the bounty through Algora.io within 2-5 days. Ensure you are eligible for payouts.

Thank you for contributing to projectdiscovery/nuclei-templates and helping us democratize security!

Acceptance Criteria: The template must include a complete POC and should not rely solely on version-based detection. Contributors are required to provide debug data(-debug) along with the template to help the triage team with validation. Rewards will only be given once the template is fully validated by the team. Templates that are incomplete or invalid will not be accepted. You can check the FAQ for the Nuclei Templates Community Rewards Program here.

Add a bounty • Share on socials

[hnd3884]

@princechaddha !Hi, is it required for template that can exploit? or you can accept the template that check vulnerable version?

[princechaddha]

@hnd3884, We only add templates with full POC in this repo. You can read more about the acceptance criteria here.