PT-2000-2008 · Phorum · Phorum

Publicado 2000-12-31 · Atualizado 2008-09-05 · CVE-2000-1229

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Phorum version 3.0.7

Description A directory traversal issue allows remote Phorum administrators to read arbitrary files by using ".." (dot dot) sequences in the default .langfile name field in the Master Settings administrative function. This causes the file to be displayed in admin.php3.

Recommendations For Phorum version 3.0.7, update the Master Settings administrative function to properly validate and sanitize the .langfile name field to prevent directory traversal attacks. As a temporary workaround, consider restricting access to the admin.php3 file and the Master Settings administrative function to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2000-1229

Produtos afetados

Phorum

Referências · 5

• 🔥 http://cert.uni-stuttgart.de/archive/bugtraq/2000/01/msg00215.html · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-1229 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2000-1229 · Nota de Segurança
• http://digitalsec.net/stuff/z-mirrors/hispahack/mi020.htm · Nota
• http://hispahack.ccc.de/mi020.html · Nota