PT-2009-2062 · Unknown+2 · Lightneasy+2

Girex · Published 2009-04-03 · Updated 2018-10-11 · CVE-2008-6592

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Thumbs-Up version 1.12 LightNEasy "no database" (aka flat) SQLite versions 1.2.2 and earlier

Description The issue allows remote attackers to copy, rename, and read arbitrary files via directory traversal sequences in the image parameter with a modified cache dir parameter containing a %00 (encoded null byte).

Recommendations For Thumbs-Up version 1.12, consider restricting access to the thumbsup.php file until a patch is available. For LightNEasy "no database" (aka flat), restrict the use of the image parameter in the affected endpoint to minimize the risk of exploitation. For SQLite versions 1.2.2 and earlier, avoid using the cache dir parameter with encoded null bytes (%00) in the affected API endpoint until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-6592

Affected Products

Lightneasy

Sqlite

Thumbs-Up

References · 8

• 🔥 https://exploit-db.com/exploits/5452 · Exploit
• 🔥 http://osvdb.org/44674 · Exploit
• http://secunia.com/advisories/29833 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-6592 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6592 · Note
• http://securityfocus.com/bid/28801 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/49851 · Note
• http://securityfocus.com/archive/1/491064/100/0/threaded · Note