PT-2009-6269 · Telepark · Telepark.Wiki

Published 2009-11-27 · Updated 2017-08-17 · CVE-2009-4090

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions telepark.wiki versions 2.4.23 and earlier

Description The issue allows remote attackers to execute arbitrary code by uploading a file with a name containing a NULL byte, due to an unrestricted file upload vulnerability in the ajax/addComment.php script.

Recommendations For versions 2.4.23 and earlier, consider restricting file uploads to only allow specific, validated file types, and ensure that file names are properly sanitized to prevent the use of NULL bytes. As a temporary workaround, consider disabling the file upload functionality in the ajax/addComment.php script until a proper fix is applied.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2009-4090

Affected Products

Telepark.Wiki

References · 6

• 🔥 http://packetstormsecurity.org/0911-exploits/Telepark-fixes-nov09-2.txt · Exploit
• 🔥 http://secunia.com/advisories/37391 · Exploit
• http://blog.telepark.com/telepark-web-software/2009/11/09/telepark-wiki-security-fixes · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2009-4090 · Security Note
• http://osvdb.org/60219 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54294 · Note