PT-2008-3387 · Linpha · Linpha

Egix + 1 · Publicado 2008-04-16 · Atualizado 2017-09-29 · CVE-2008-1856

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions LinPHA versions 1.3.3 and earlier

Description The issue allows remote attackers to conduct directory traversal attacks and execute arbitrary local files. This is achieved by modifying the configuration file through a settings action in db handler.php without requiring authentication. The attackers can place directory traversal sequences into the maps type configuration setting and then send a request to "maps view.php", causing "map.main.class.php" to use the modified configuration.

Recommendations For LinPHA versions 1.3.3 and earlier, consider restricting access to the db handler.php file and the maps view.php endpoint to require authentication for settings actions, and avoid using directory traversal sequences in the maps type configuration setting until a fix is available.

Exploit

Correção

Path traversal

RCE

Enumeração de Fraquezas

CWE-22

CWE-20

Identificadores relacionados

CVE-2008-1856

Produtos afetados

Linpha

Referências · 8

• 🔥 https://exploit-db.com/exploits/5392 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1856 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41676 · Nota
• http://sourceforge.net/project/shownotes.php?release_id=595725 · Nota
• http://osvdb.org/50229 · Nota
• http://securityfocus.com/bid/28654 · Nota
• http://vupen.com/english/advisories/2008/1136 · Nota
• http://secunia.com/advisories/29724 · Aviso do Fabricante