PT-2009-2128 · Simple Machines · Simple Machines Forum

Alessandro Tagliapietra · Published 2009-04-07 · Updated 2017-09-29 · CVE-2008-6658

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Simple Machines Forum (SMF) versions 1.0 through 1.0.14 Simple Machines Forum (SMF) versions 1.1 through 1.1.6

Description The issue allows remote authenticated administrators to install packages from arbitrary directories via a .. (dot dot) in the package parameter during an install2 action. This can be achieved by exploiting a predictable package filename in attachments/ that was uploaded through a post2 action to "index.php".

Recommendations For Simple Machines Forum (SMF) versions 1.0 through 1.0.14, update to version 1.0.15 or later. For Simple Machines Forum (SMF) versions 1.1 through 1.1.6, update to version 1.1.7 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-6658

Affected Products

Simple Machines Forum

References · 4

• 🔥 https://exploit-db.com/exploits/6993 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-6658 · Security Note
• http://simplemachines.org/community/index.php?topic=272861.0 · Vendor Advisory
• http://osvdb.org/50070 · Note