PT-2005-5141 · Metadot · Metadot Portal Server

Claudean Zheng + 1 · Published 2005-12-21 · Updated 2018-10-19 · CVE-2005-4458

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Metadot Portal Server versions 6.4.4 and earlier

Description The issue arises from the Group.pm module in Metadot Portal Server, where it fails to properly reset the $IS OWNER, $IS ADMIN, and $IS MANAGER global variables during special privilege checks. This oversight allows users to escalate their privileges to administrator level by adding themselves to the SITE MGR group.

Recommendations For Metadot Portal Server versions 6.4.4 and earlier, consider restricting access to the Group.pm module until a proper fix is applied, and avoid using the $IS OWNER, $IS ADMIN, and $IS MANAGER global variables for privilege checks. As a temporary workaround, manually monitor and control user additions to the SITE MGR group to prevent unauthorized privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-4458

Affected Products

Metadot Portal Server

References · 10

• http://securityfocus.com/bid/15975 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-4458 · Security Note
• http://archives.neohapsis.com/archives/fulldisclosure/2005-12/1012.html · Vendor Advisory
• http://secunia.com/advisories/18137 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/23847 · Note
• http://metadot.com/metadot/index.pl?iid=2632 · Note
• http://osvdb.org/22014 · Note
• http://vupen.com/english/advisories/2005/3030 · Note
• http://securityreason.com/securityalert/287 · Note
• http://securityfocus.com/archive/1/420002/100/0/threaded · Note