PT-2008-4117 · Erfurtwiki · Erfurtwiki

Unohope · Publicado 2008-06-12 · Atualizado 2018-10-11 · CVE-2008-2672

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions ErfurtWiki versions R1.02b and earlier

Description The issue allows remote attackers to include and execute arbitrary local files via directory traversal vulnerabilities. This can be achieved by using a .. (dot dot) in the ewiki id and ewiki action parameters to "fragments/css.php", and possibly the id parameter to the default URI. The default URI is site-specific but often performs an include once of ewiki.php.

Recommendations For ErfurtWiki versions R1.02b and earlier, consider disabling the register globals setting to mitigate the risk of exploitation. As a temporary workaround, restrict access to the "fragments/css.php" file and the default URI to minimize the risk of exploitation. Avoid using the ewiki id, ewiki action, and id parameters in the affected API endpoints until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-2672

Produtos afetados

Erfurtwiki

Referências · 7

• 🔥 http://securityfocus.com/bid/29628 · Exploit
• 🔥 https://exploit-db.com/exploits/5771 · Exploit
• 🔥 http://chroot.org/exploits/chroot_uu_007 · Exploit
• http://securityfocus.com/archive/1/493219/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42981 · Nota
• http://securityreason.com/securityalert/3936 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-2672 · Nota de Segurança