PT-2012-4170 · Collabtive · Collabtive

Mark Hoopes + 1 · Publicado 2012-06-17 · Atualizado 2017-08-29 · CVE-2012-2670

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Collabtive versions prior to 0.7.6

Description The issue allows remote authenticated users, and possibly unauthenticated attackers, to bypass intended access restrictions. This is achieved by uploading an avatar file with an accepted Content-Type, such as image/jpeg, and then accessing it via a direct request to the file in files/standard/avatar. This enables the upload and execution of arbitrary files.

Recommendations For versions prior to 0.7.6, update to version 0.7.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the manageuser.php file and the files/standard/avatar directory to minimize the risk of exploitation. Avoid using the manageuser.php file to upload avatar files until the issue is resolved.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2012-2670

Produtos afetados

Collabtive

Referências · 10

• https://exchange.xforce.ibmcloud.com/vulnerabilities/76101 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2670 · Nota
• http://xync.org/2012/06/04/Arbitrary-File-Upload-in-Collabtive.html · Nota
• http://collabtive.o-dyn.de/blog/?p=426 · Nota
• http://securityfocus.com/archive/1/522973/30/0/threaded · Nota
• http://openwall.com/lists/oss-security/2012/06/06/6 · Nota
• http://openwall.com/lists/oss-security/2012/06/06/9 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2012-06/0007.html · Nota
• http://securityfocus.com/bid/53813 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-2670 · Nota de Segurança