PT-2005-5141 · Metadot · Metadot Portal Server

Claudean Zheng + 1 · Publicado 2005-12-21 · Atualizado 2018-10-19 · CVE-2005-4458

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Metadot Portal Server versions 6.4.4 and earlier

Description The issue arises from the Group.pm module in Metadot Portal Server, where it fails to properly reset the $IS OWNER, $IS ADMIN, and $IS MANAGER global variables during special privilege checks. This oversight allows users to escalate their privileges to administrator level by adding themselves to the SITE MGR group.

Recommendations For Metadot Portal Server versions 6.4.4 and earlier, consider restricting access to the Group.pm module until a proper fix is applied, and avoid using the $IS OWNER, $IS ADMIN, and $IS MANAGER global variables for privilege checks. As a temporary workaround, manually monitor and control user additions to the SITE MGR group to prevent unauthorized privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-4458

Produtos afetados

Metadot Portal Server

Referências · 10

• http://secunia.com/advisories/18137 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23847 · Nota
• http://metadot.com/metadot/index.pl?iid=2632 · Nota
• http://osvdb.org/22014 · Nota
• http://securityfocus.com/bid/15975 · Correção
• http://vupen.com/english/advisories/2005/3030 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-4458 · Nota de Segurança
• http://securityreason.com/securityalert/287 · Nota
• http://securityfocus.com/archive/1/420002/100/0/threaded · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1012.html · Aviso do Fabricante