PT-2009-3310 · Ravennuke · Ravennuke

Janek Vind + 1 · Publicado 2009-02-22 · Atualizado 2018-10-10 · CVE-2009-0677

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions RavenNuke version 2.30

Description The issue allows remote authenticated users to execute arbitrary code via PHP sequences in an element of the replacements array, which is processed by the preg replace function with the eval switch, as specified in an element of the patterns array. This is accessible through modules.php in the Your Account module, specifically in avatarlist.php.

Recommendations For RavenNuke version 2.30, consider disabling the eval switch in the preg replace function or restricting access to avatarlist.php to minimize the risk of exploitation. Additionally, avoid using the replacements array and patterns array with untrusted input until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2009-0677

Produtos afetados

Ravennuke

Referências · 9

• 🔥 https://exploit-db.com/exploits/8068 · Exploit
• http://osvdb.org/52007 · Nota
• http://securityfocus.com/archive/1/500988/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48789 · Nota
• http://ravenphpscripts.com/postt17156.html&sid=12d1201371612260a42fa846ebce7bad · Aviso do Fabricante
• http://securityfocus.com/bid/33787 · Nota
• http://waraxe.us/advisory-72.html · Nota
• http://secunia.com/advisories/33928 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-0677 · Nota de Segurança