PT-2007-1022 · Debian · Sitebar

Published 2007-10-17 · Updated 2018-10-15 · CVE-2007-5695

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: SiteBar versions 3.3.8

Description: The issue concerns multiple vulnerabilities in the SiteBar package of the Debian GNU/Linux operating system, which can be exploited by a remote attacker who has passed the authentication procedure. This can lead to a breach of confidentiality, integrity, and availability of protected information. Specifically, there is an open redirect vulnerability in command.php that allows remote attackers to redirect users to arbitrary web sites via a URL in the forward parameter in a Log In action.

Recommendations: For SiteBar version 3.3.8, consider restricting access to the command.php file until a patch is available. As a temporary workaround, avoid using the forward parameter in the Log In action to minimize the risk of exploitation.

Exploit

Fix

Path traversal

Link Following

Weakness Enumeration

CWE-22

CWE-59

Related Identifiers

BDU:2015-02683

CVE-2007-5695

DSA-1423-1

Affected Products

Sitebar

References · 19

• 🔥 http://securityfocus.com/bid/26126 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5692 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5694 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200711-05.xml · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5693 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5492 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2007-5695 · Security Note
• https://bdu.fstec.ru/vul/2015-02683 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5491 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5695 · Security Note
• http://teamforge.net/viewcvs/viewcvs.cgi/tags/release-3.3.9/doc/history.txt?view=markup · Patch
• http://debian.org/security/2007/dsa-1423 · Vendor Advisory
• http://vupen.com/english/advisories/2007/3768 · Note
• http://osvdb.org/41581 · Note
• http://securityfocus.com/archive/1/482499/100/0/threaded · Note