PT-2009-2128 · Simple Machines · Simple Machines Forum

Alessandro Tagliapietra · Publicado 2009-04-07 · Atualizado 2017-09-29 · CVE-2008-6658

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Simple Machines Forum (SMF) versions 1.0 through 1.0.14 Simple Machines Forum (SMF) versions 1.1 through 1.1.6

Description The issue allows remote authenticated administrators to install packages from arbitrary directories via a .. (dot dot) in the package parameter during an install2 action. This can be achieved by exploiting a predictable package filename in attachments/ that was uploaded through a post2 action to "index.php".

Recommendations For Simple Machines Forum (SMF) versions 1.0 through 1.0.14, update to version 1.0.15 or later. For Simple Machines Forum (SMF) versions 1.1 through 1.1.6, update to version 1.1.7 or later.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-6658

Produtos afetados

Simple Machines Forum

Referências · 4

• 🔥 https://exploit-db.com/exploits/6993 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6658 · Nota de Segurança
• http://osvdb.org/50070 · Nota
• http://simplemachines.org/community/index.php?topic=272861.0 · Aviso do Fabricante