PT-2005-2217 · Az · Azbb

James Bercegay · Publicado 2005-04-21 · Atualizado 2017-07-11 · CVE-2005-1201

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions AZ Bulletin board (AZbb) versions prior to 1.0.08

Description The issue allows remote authenticated users with administrative privileges to delete arbitrary files by utilizing a .. (dot dot) in the URL to admin avatar.php or admin attachment.php. Additionally, remote attackers can enumerate files via a .. (dot dot) in the attachment parameter to attachment.php, which displays different messages based on whether a file exists or not.

Recommendations For versions prior to 1.0.08, update to version 1.0.08 or later to resolve the issue. As a temporary workaround, consider restricting access to admin avatar.php, admin attachment.php, and attachment.php to minimize the risk of exploitation. Avoid using the attachment parameter in the attachment.php endpoint until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2005-1201

Produtos afetados

Azbb

Referências · 10

• 🔥 https://exploit-db.com/exploits/43823 · Exploit
• http://osvdb.org/15701 · Nota
• http://azbb.cyaccess.com/azbb.php?1091778548 · Correção
• http://gulftech.org/?node=research&article_id=00068-04192005 · Nota
• http://marc.info/?l=bugtraq&m=111401838521857&w=2 · Nota
• http://osvdb.org/15702 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20183 · Nota
• http://secunia.com/advisories/15013 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20180 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1201 · Nota de Segurança