0

I just got a message from a security guy that my application is executing remote code if they pass a Content-Type: image/asp. For now he does not disclose anything. Now my question is that if I am using ASP.NET 5 MVC application using IIS webserver on Windows Server 2012 R2, does any can send a specific content-type to web server in order do remote code execution?

4
  • That depends on your application. In general, Content-Type must never be trusted! Don't let people upload arbitrary stuff – MechMK1 Nov 16 '20 at 14:23
  • Is there any general vulnerability that can use Content-Type to make RCE? – user960567 Nov 16 '20 at 15:54
  • 2
    "if they pass a ..." is really unspecific. Are they able to upload a file? It's definitely a plausible scenario that a web app allows uploads with a particular content type, and that this causes the server to execute code contained in the upload if the file is requested directly. "For now he does not disclose anything." How come? If they are asking for money to disclose a vulnerability it's possibly a scam. – Arminius Nov 16 '20 at 19:19
  • @Arminius, Thanks for your comment, Yes I am aware of uploading arbitrary file – user960567 Nov 17 '20 at 6:04
0

Yes any one can upload file with Malicious Code to make remote code execution, stored XXS or OS injection

read this answer MIME Type vs. Magic Numbers

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.