PT-2009-6536 · Phpgroupware · Phpgroupware

Moritz Muehlenhoff · Published 2009-12-24 · Updated 2017-08-17 · CVE-2009-4415

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions phpGroupWare versions 0.9.16.12 through 0.9.16.013

Description The issue allows remote attackers to read arbitrary files or include and execute arbitrary local files. This can be achieved via the csvfile parameter to the "addressbook/csv import.php" endpoint, or the conv type parameter in "addressbook/inc/class.uiXport.inc.php".

Recommendations For phpGroupWare versions 0.9.16.12 through 0.9.16.013, consider restricting access to the "addressbook/csv import.php" and "addressbook/inc/class.uiXport.inc.php" files until a patch is available. As a temporary workaround, avoid using the csvfile and conv type parameters in the affected endpoints.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2009-4415

DSA-1978-1

Affected Products

Phpgroupware

References · 12

• http://secunia.com/advisories/35519 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-4415 · Security Note
• http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/inc/class.uiXport.inc.php?r1=14819&r2=19117&pathrev=19117&sortby=date&root=phpgroupware · Note
• http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/addressbook/csv_import.php?r1=15464&r2=19117&pathrev=19117&sortby=date&root=phpgroupware · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51924 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51921 · Note
• http://osvdb.org/56180 · Note
• http://openwall.com/lists/oss-security/2009/12/20/1 · Note
• http://osvdb.org/56177 · Note
• http://svn.savannah.gnu.org/viewvc?view=rev&root=phpgroupware&sortby=date&revision=19117 · Note
• http://svn.savannah.gnu.org/viewvc/branches/Version-0_9_16-branch/phpgwapi/doc/CHANGELOG?r1=17045&r2=19117&pathrev=19117&sortby=date&root=phpgroupware · Note
• http://securityfocus.com/bid/35761 · Note