PT-2008-3561 · Netoffice · Netoffice Dwins

Db · Publicado 2008-05-01 · Atualizado 2018-10-11 · CVE-2008-2044

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions netOffice Dwins version 1.3 p2

Description The issue allows remote attackers to bypass authentication and execute arbitrary code. This is possible because the demoSession variable is compared to the 'true' string literal instead of the true boolean literal. Attackers can exploit this by setting the demoSession variable to 1, for example, by uploading a PHP script via an action to "projects site/uploadfile.php".

Recommendations For netOffice Dwins version 1.3 p2, consider modifying the comparison of the demoSession variable to use the true boolean literal instead of the 'true' string literal to prevent authentication bypass. As a temporary workaround, restrict access to the "projects site/uploadfile.php" endpoint to minimize the risk of exploitation.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2008-2044

Produtos afetados

Netoffice Dwins

Referências · 9

• 🔥 https://exploit-db.com/exploits/31317 · Exploit
• 🔥 http://securityfocus.com/archive/1/488958 · Exploit
• http://securityfocus.com/bid/28051 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-2044 · Nota de Segurança
• http://secunia.com/advisories/29193 · Nota
• http://netofficedwins.sourceforge.net/modules/news/article.php?storyid=47 · Nota
• http://securityreason.com/securityalert/3845 · Nota
• http://sourceforge.net/forum/forum.php?forum_id=814851 · Nota
• http://securityfocus.com/archive/1/491542/100/0/threaded · Nota