PT-2008-6020 · Smarty · Smarty

Uwe Tews · Publicado 2008-10-31 · Atualizado 2017-08-08 · CVE-2008-4810

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Smarty version 2.6.20

Description The issue allows remote attackers to execute arbitrary PHP code via vectors related to templates, including the use of a dollar-sign character and a double quoted literal string. This affects slightly different SVN revisions.

Recommendations For Smarty version 2.6.20, update to a version after r2797 to resolve the issue. As a temporary workaround, consider restricting the use of dollar-sign characters and double quoted literal strings in templates until a patch is available.

Correção

RCE

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2008-4810

DSA-1691-1

DSA-1919-1

Produtos afetados

Smarty

Referências · 12

• https://nvd.nist.gov/vuln/detail/CVE-2008-4810 · Nota de Segurança
• https://bugs.gentoo.org/attachment.cgi?id=169804&action=view · Nota
• http://code.google.com/p/smarty-php/source/detail?r=2797&path=/trunk/libs/Smarty_Compiler.class.php · Nota
• http://securityfocus.com/bid/31862 · Nota
• http://smarty-php.googlecode.com/svn/trunk/NEWS · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46031 · Nota
• http://securityvulns.ru/Udocument746.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4810 · Nota
• http://secunia.com/advisories/32329 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2008/10/25/2 · Nota
• http://debian.org/security/2008/dsa-1691 · Aviso do Fabricante
• http://code.google.com/p/smarty-php/source/detail?r=2784&path=/trunk/libs/Smarty_Compiler.class.php · Nota