PT-2005-3488 · Dokeos+1 · Dokeos+1

Robbe De Keyzer · Published 2005-08-17 · Updated 2008-09-05 · CVE-2005-2598

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Dokeos versions 1.6 and earlier Claroline (affected versions not specified)

Description The issue allows remote attackers to perform various malicious actions, including deleting arbitrary files or directories via the delete parameter to "claroline/scorm/scormdocument.php", moving arbitrary files via the move to and move file parameters to "claroline/document/document.php", or determining the existence of arbitrary files via the file parameter to "claroline/scorm/showinframes.php" or "claroline/scorm/contents.php".

Recommendations For Dokeos versions 1.6 and earlier, consider disabling access to the affected API endpoints until a patch is available. Restrict access to the delete parameter in "claroline/scorm/scormdocument.php" to prevent arbitrary file deletion. Avoid using the move to and move file parameters in "claroline/document/document.php" to prevent arbitrary file movement. Limit access to the file parameter in "claroline/scorm/showinframes.php" and "claroline/scorm/contents.php" to prevent determining the existence of arbitrary files. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-2598

Affected Products

Claroline

Dokeos

References · 5

• http://secunia.com/advisories/16407 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2598 · Security Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/036345.html · Note
• http://seclists.org/lists/fulldisclosure/2005/Aug/0394.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2598 · Note