PT-2009-2062 · Unknown+2 · Lightneasy+2

Girex · Publicado 2009-04-03 · Atualizado 2018-10-11 · CVE-2008-6592

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Thumbs-Up version 1.12 LightNEasy "no database" (aka flat) SQLite versions 1.2.2 and earlier

Description The issue allows remote attackers to copy, rename, and read arbitrary files via directory traversal sequences in the image parameter with a modified cache dir parameter containing a %00 (encoded null byte).

Recommendations For Thumbs-Up version 1.12, consider restricting access to the thumbsup.php file until a patch is available. For LightNEasy "no database" (aka flat), restrict the use of the image parameter in the affected endpoint to minimize the risk of exploitation. For SQLite versions 1.2.2 and earlier, avoid using the cache dir parameter with encoded null bytes (%00) in the affected API endpoint until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-6592

Produtos afetados

Lightneasy

Sqlite

Thumbs-Up

Referências · 8

• 🔥 https://exploit-db.com/exploits/5452 · Exploit
• 🔥 http://osvdb.org/44674 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6592 · Nota
• http://securityfocus.com/bid/28801 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49851 · Nota
• http://secunia.com/advisories/29833 · Aviso do Fabricante
• http://securityfocus.com/archive/1/491064/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-6592 · Nota de Segurança