CVE-2017-9812

HIGH

Kaspersky Anti-Virus for Linux File Server < 8.0.3.297 - Arbitrary File Read via getReportStatus reportId Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-9812. PoCs published by Core Security.

AI-analyzed exploit summary This exploit demonstrates a CSRF vulnerability in Kaspersky Anti-Virus for Linux File Server's Web Management Console, allowing remote command execution as the 'kluser' account. It also describes a privilege escalation to root via the quarantine functionality.

Description

The reportId parameter of the getReportStatus action method can be abused in the web interface in Kaspersky Anti-Virus for Linux File Server before Maintenance Pack 2 Critical Fix 4 (version 8.0.4.312) to read arbitrary files with kluser privileges.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Core Security · textwebappslinux
https://www.exploit-db.com/exploits/42269

This exploit demonstrates a CSRF vulnerability in Kaspersky Anti-Virus for Linux File Server's Web Management Console, allowing remote command execution as the 'kluser' account. It also describes a privilege escalation to root via the quarantine functionality.

Classification
Working Poc 95%
Attack Type
Rce | Lpe
Complexity
Moderate
Reliability
Reliable
Target: Kaspersky Anti-Virus for Linux File Server 8.0.3.297
Auth required
Prerequisites: Authenticated session to the Web Management Console · Network access to the target server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Exploit, Mailing List, Third Party Advisory, VDB Entry mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2017/Jun/33
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/99330
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1038798
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/42269/

Scores

CVSS v3 7.5
EPSS 0.1127
EPSS Percentile 95.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
kaspersky/anti-virus_for_linux_server < 8.0.3.297
Published Jul 17, 2017
Tracked Since Feb 18, 2026