PT-2008-6020 · Smarty · Smarty

Uwe Tews · Published 2008-10-31 · Updated 2017-08-08 · CVE-2008-4810

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Smarty version 2.6.20

Description The issue allows remote attackers to execute arbitrary PHP code via vectors related to templates, including the use of a dollar-sign character and a double quoted literal string. This affects slightly different SVN revisions.

Recommendations For Smarty version 2.6.20, update to a version after r2797 to resolve the issue. As a temporary workaround, consider restricting the use of dollar-sign characters and double quoted literal strings in templates until a patch is available.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-4810

DSA-1691-1

DSA-1919-1

Affected Products

Smarty

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2008-4810 · Security Note
• http://secunia.com/advisories/32329 · Vendor Advisory
• http://debian.org/security/2008/dsa-1691 · Vendor Advisory
• https://bugs.gentoo.org/attachment.cgi?id=169804&action=view · Note
• http://code.google.com/p/smarty-php/source/detail?r=2797&path=/trunk/libs/Smarty_Compiler.class.php · Note
• http://securityfocus.com/bid/31862 · Note
• http://smarty-php.googlecode.com/svn/trunk/NEWS · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46031 · Note
• http://securityvulns.ru/Udocument746.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4810 · Note
• http://openwall.com/lists/oss-security/2008/10/25/2 · Note
• http://code.google.com/p/smarty-php/source/detail?r=2784&path=/trunk/libs/Smarty_Compiler.class.php · Note