PT-2009-2309 · V Webmail · V-Webmail

Published 2009-07-01 · Updated 2017-08-17 · CVE-2008-6840

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: V-webmail version 1.6.4

Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in specific parameters. The CONFIG[pear dir] parameter in multiple files, including Mail/RFC822.php, Net/Socket.php, XML/Parser.php, XML/Tree.php, Mail/mimeDecode.php, Console/Getopt.php, System.php, Log.php, File.php, includes/prepend.php, and includes/cachedConfig.php, is vulnerable. Additionally, the CONFIG[includes] parameter in prepend.php and email.list.search.php is also affected.

Recommendations: For V-webmail version 1.6.4, consider disabling the CONFIG[pear dir] and CONFIG[includes] parameters in the affected files until a patch is available. Restrict access to the vulnerable files in the includes/pear/ directory and the includes/ directory to minimize the risk of exploitation. Avoid using the CONFIG[pear dir] parameter in the affected API endpoints until the issue is resolved.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-6840

Affected Products

V-Webmail

References · 17

• 🔥 https://exploit-db.com/exploits/32024 · Exploit
• 🔥 https://exploit-db.com/exploits/32026 · Exploit
• 🔥 https://exploit-db.com/exploits/32029 · Exploit
• 🔥 https://exploit-db.com/exploits/32028 · Exploit
• 🔥 https://exploit-db.com/exploits/32035 · Exploit
• 🔥 http://packetstormsecurity.org/0807-exploits/vwebmail-rfi.txt · Exploit
• 🔥 https://exploit-db.com/exploits/32027 · Exploit
• 🔥 https://exploit-db.com/exploits/32033 · Exploit
• 🔥 https://exploit-db.com/exploits/32032 · Exploit
• 🔥 https://exploit-db.com/exploits/32030 · Exploit
• 🔥 https://exploit-db.com/exploits/32036 · Exploit
• 🔥 http://securityfocus.com/bid/30162 · Exploit
• 🔥 https://exploit-db.com/exploits/32034 · Exploit
• 🔥 https://exploit-db.com/exploits/32025 · Exploit
• 🔥 https://exploit-db.com/exploits/32031 · Exploit