PT-2008-3387 · Linpha · Linpha

Egix + 1 · Published 2008-04-16 · Updated 2017-09-29 · CVE-2008-1856

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions LinPHA versions 1.3.3 and earlier

Description The issue allows remote attackers to conduct directory traversal attacks and execute arbitrary local files. This is achieved by modifying the configuration file through a settings action in db handler.php without requiring authentication. The attackers can place directory traversal sequences into the maps type configuration setting and then send a request to "maps view.php", causing "map.main.class.php" to use the modified configuration.

Recommendations For LinPHA versions 1.3.3 and earlier, consider restricting access to the db handler.php file and the maps view.php endpoint to require authentication for settings actions, and avoid using directory traversal sequences in the maps type configuration setting until a fix is available.

Exploit

Fix

Path traversal

RCE

Weakness Enumeration

CWE-22

CWE-20

Related Identifiers

CVE-2008-1856

Affected Products

Linpha

References · 8

• 🔥 https://exploit-db.com/exploits/5392 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1856 · Security Note
• http://secunia.com/advisories/29724 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41676 · Note
• http://sourceforge.net/project/shownotes.php?release_id=595725 · Note
• http://osvdb.org/50229 · Note
• http://securityfocus.com/bid/28654 · Note
• http://vupen.com/english/advisories/2008/1136 · Note