PT-2008-3561 · Netoffice · Netoffice Dwins

Db · Published 2008-05-01 · Updated 2018-10-11 · CVE-2008-2044

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions netOffice Dwins version 1.3 p2

Description The issue allows remote attackers to bypass authentication and execute arbitrary code. This is possible because the demoSession variable is compared to the 'true' string literal instead of the true boolean literal. Attackers can exploit this by setting the demoSession variable to 1, for example, by uploading a PHP script via an action to "projects site/uploadfile.php".

Recommendations For netOffice Dwins version 1.3 p2, consider modifying the comparison of the demoSession variable to use the true boolean literal instead of the 'true' string literal to prevent authentication bypass. As a temporary workaround, restrict access to the "projects site/uploadfile.php" endpoint to minimize the risk of exploitation.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-2044

Affected Products

Netoffice Dwins

References · 9

• 🔥 https://exploit-db.com/exploits/31317 · Exploit
• 🔥 http://securityfocus.com/archive/1/488958 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-2044 · Security Note
• http://securityfocus.com/bid/28051 · Note
• http://secunia.com/advisories/29193 · Note
• http://netofficedwins.sourceforge.net/modules/news/article.php?storyid=47 · Note
• http://securityreason.com/securityalert/3845 · Note
• http://sourceforge.net/forum/forum.php?forum_id=814851 · Note
• http://securityfocus.com/archive/1/491542/100/0/threaded · Note