PT-2006-3974 · Zeroboard · Zeroboard

Choi Min-Sung · Published 2006-06-19 · Updated 2018-10-18 · CVE-2006-3070

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Zeroboard version 4.1 pl8

Description The issue allows remote attackers to bypass restrictions for uploading files with executable extensions. This is achieved by uploading a .htaccess file that includes an AddType directive, which assigns an executable module to files with assumed-safe extensions. For example, an attacker can assign the txt extension to be handled by application/x-httpd-php, effectively making .txt files executable.

Recommendations For Zeroboard version 4.1 pl8, consider disabling the upload of .htaccess files or restricting the use of the AddType directive in .htaccess files to prevent exploitation. Additionally, restrict access to the write ok.php file to minimize the risk of uploading malicious files.

Exploit

Fix

Related Identifiers

CVE-2006-3070

Affected Products

Zeroboard

References · 8

• 🔥 http://securecast.wins21.com/zerovul.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3070 · Security Note
• http://secunia.com/advisories/20592 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27038 · Note
• http://vupen.com/english/advisories/2006/2318 · Note
• http://marc.info/?l=full-disclosure&m=115044567831726&w=2 · Note
• http://securityfocus.com/archive/1/437442/30/4320/threaded · Note
• http://securityfocus.com/bid/18465 · Note