PT-2010-4838 · Mura+1 · Mura Cms+1

Rohan Stelling + 1 · Publicado 2010-09-29 · Atualizado 2010-09-30 · CVE-2010-3468

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mura CMS versions 5.1 through 5.1.497 Mura CMS versions 5.2 through 5.2.2808 Sava CMS versions 5 through 5.2

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. (dot dot) in the FILEID parameter to the "tasks/render/file/" endpoint.

Recommendations For Mura CMS versions 5.1 through 5.1.497, update to version 5.1.498 or later. For Mura CMS versions 5.2 through 5.2.2808, update to version 5.2.2809 or later. For Sava CMS versions 5 through 5.2, update to a version later than 5.2, if available. As a temporary workaround, consider restricting access to the "tasks/render/file/" endpoint until a patch is available. Avoid using the FILEID parameter in the affected endpoint until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2010-3468

Produtos afetados

Mura Cms

Sava Cms

Referências · 8

• 🔥 http://stratsec.net/Research/Advisories/Blue-River-Mura-CMS-Directory-Traversal-%28SS-2010-0 · Exploit
• 🔥 http://exploit-db.com/exploits/15120 · Exploit
• 🔥 https://exploit-db.com/exploits/15120 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3468 · Nota
• http://secunia.com/advisories/41591 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2010-3468 · Nota de Segurança
• http://securityfocus.com/bid/43499 · Nota
• http://getmura.com/index.cfm/blog/critical-security-patch · Aviso do Fabricante