PT-2009-6269 · Telepark · Telepark.Wiki

Publicado 2009-11-27 · Atualizado 2017-08-17 · CVE-2009-4090

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions telepark.wiki versions 2.4.23 and earlier

Description The issue allows remote attackers to execute arbitrary code by uploading a file with a name containing a NULL byte, due to an unrestricted file upload vulnerability in the ajax/addComment.php script.

Recommendations For versions 2.4.23 and earlier, consider restricting file uploads to only allow specific, validated file types, and ensure that file names are properly sanitized to prevent the use of NULL bytes. As a temporary workaround, consider disabling the file upload functionality in the ajax/addComment.php script until a proper fix is applied.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2009-4090

Produtos afetados

Telepark.Wiki

Referências · 6

• 🔥 http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt · Exploit
• 🔥 http://secunia.com/advisories/37391 · Exploit
• http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes · Correção
• http://osvdb.org/60219 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54294 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-4090 · Nota de Segurança