PT-2006-3974 · Zeroboard · Zeroboard

Choi Min-Sung · Publicado 2006-06-19 · Atualizado 2018-10-18 · CVE-2006-3070

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Zeroboard version 4.1 pl8

Description The issue allows remote attackers to bypass restrictions for uploading files with executable extensions. This is achieved by uploading a .htaccess file that includes an AddType directive, which assigns an executable module to files with assumed-safe extensions. For example, an attacker can assign the txt extension to be handled by application/x-httpd-php, effectively making .txt files executable.

Recommendations For Zeroboard version 4.1 pl8, consider disabling the upload of .htaccess files or restricting the use of the AddType directive in .htaccess files to prevent exploitation. Additionally, restrict access to the write ok.php file to minimize the risk of uploading malicious files.

Exploit

Correção

Identificadores relacionados

CVE-2006-3070

Produtos afetados

Zeroboard

Referências · 8

• 🔥 http://securecast.wins21.com/zerovul.html · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27038 · Nota
• http://vupen.com/english/advisories/2006/2318 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3070 · Nota de Segurança
• http://marc.info/?l=full-disclosure&m=115044567831726&w=2 · Nota
• http://securityfocus.com/archive/1/437442/30/4320/threaded · Nota
• http://securityfocus.com/bid/18465 · Nota
• http://secunia.com/advisories/20592 · Aviso do Fabricante