PT-2009-2682 · Mostlyce+1 · Mostlyce+1

Published 2009-09-11 · Updated 2018-10-11 · CVE-2008-7215

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions MOStlyCE versions prior to 2.4 Mambo versions 4.6.3 and earlier

Description The issue allows remote attackers to rename arbitrary files and cause a denial of service. This is achieved by modifying the file[NewFile][name], file[NewFile][tmp name], and file[NewFile][size] parameters in a FileUpload command. These parameters are used to modify equivalent variables in $ FILES that are accessed when the is uploaded file check fails.

Recommendations For MOStlyCE versions prior to 2.4, update to version 2.4 or later. For Mambo versions 4.6.3 and earlier, consider upgrading to a version later than 4.6.3 as a mitigation measure. As a temporary workaround, consider restricting access to the FileUpload command to minimize the risk of exploitation.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-7215

Affected Products

Mostlyce

Mambo

References · 10

• 🔥 http://bugreport.ir/index_33.htm · Exploit
• 🔥 http://osvdb.org/42532 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-7215 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2008-02/0444.html · Vendor Advisory
• http://secunia.com/advisories/28670 · Vendor Advisory
• http://vupen.com/english/advisories/2008/0325 · Vendor Advisory
• http://securityfocus.com/bid/27472 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39986 · Note
• http://forum.mambo-foundation.org/showthread.php?t=10158 · Note
• http://securityfocus.com/archive/1/487128/100/200/threaded · Note