PT-2004-2834 · Nuked Klan · Nuked-Klan

Frog-M@N + 1 · Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1937

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Nuked-KlaN versions 1.4b through 1.5b

Description The issue allows remote attackers to read or include arbitrary files via .. sequences in the user langue parameter to "index.php" or the langue parameter to "update.php". It also enables modification of arbitrary GLOBAL variables by causing "globals.php" to be loaded before "conf.inc.php" via .. sequences in the file parameter with the page parameter set to "globals", or "../globals.php" in the user langue parameter. This can be demonstrated by modifying the $nuked[prefix] variable in the Suggest module.

Recommendations For Nuked-KlaN versions 1.4b through 1.5b, consider disabling the user langue and langue parameters in the "index.php" and "update.php" files, respectively, until a patch is available. Restrict access to the "globals.php" file to minimize the risk of exploitation. Avoid using the file parameter with the page parameter set to "globals" in vulnerable versions.

Exploit

Fix

Related Identifiers

CVE-2004-1937

Affected Products

Nuked-Klan

References · 8

• 🔥 http://phpsecure.info/v2/tutos/frog/Nuked-KlaN.txt · Exploit
• 🔥 http://securityfocus.com/bid/10104 · Exploit
• 🔥 https://exploit-db.com/exploits/23988 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1937 · Security Note
• http://secunia.com/advisories/11341 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15843 · Note
• http://marc.info/?l=bugtraq&m=108222826225823&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15844 · Note