PT-2006-4406 · Pivot · Pivot

Rgod · Publicado 2006-07-12 · Atualizado 2018-10-18 · CVE-2006-3531

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Pivot versions 1.30 RC2 and earlier

Description The issue allows remote attackers to obtain privileges and upload arbitrary files by modifying certain parameters. This is achieved by creating authentication credentials from parameters in the includes/editor/insert image.php file. The vulnerable parameters include pass and session, as well as pass and userlevel indices of the Pivot Vars[] or Users[] array parameters.

Recommendations For Pivot versions 1.30 RC2 and earlier, consider disabling the includes/editor/insert image.php file until a patch is available to prevent remote attackers from obtaining privileges and uploading arbitrary files. Restrict access to the Pivot Vars[] and Users[] array parameters to minimize the risk of exploitation. Avoid using the pass and session parameters, as well as the pass and userlevel indices, in the affected file until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2006-3531

Produtos afetados

Pivot

Referências · 11

• 🔥 http://securityfocus.com/bid/18881 · Exploit
• 🔥 https://exploit-db.com/exploits/1991 · Exploit
• 🔥 http://retrogod.altervista.org/pivot_130RC2_xpl.html · Exploit
• http://secunia.com/advisories/20962 · Aviso do Fabricante
• http://osvdb.org/27126 · Nota
• http://securityfocus.com/archive/1/439495/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27671 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3531 · Nota de Segurança
• http://vupen.com/english/advisories/2006/2744 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3531 · Nota
• http://securityreason.com/securityalert/1214 · Nota