PT-2010-4838 · Mura+1 · Mura Cms+1

Rohan Stelling + 1 · Published 2010-09-29 · Updated 2010-09-30 · CVE-2010-3468

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mura CMS versions 5.1 through 5.1.497 Mura CMS versions 5.2 through 5.2.2808 Sava CMS versions 5 through 5.2

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. (dot dot) in the FILEID parameter to the "tasks/render/file/" endpoint.

Recommendations For Mura CMS versions 5.1 through 5.1.497, update to version 5.1.498 or later. For Mura CMS versions 5.2 through 5.2.2808, update to version 5.2.2809 or later. For Sava CMS versions 5 through 5.2, update to a version later than 5.2, if available. As a temporary workaround, consider restricting access to the "tasks/render/file/" endpoint until a patch is available. Avoid using the FILEID parameter in the affected endpoint until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2010-3468

Affected Products

Mura Cms

Sava Cms

References · 8

• 🔥 http://stratsec.net/Research/Advisories/Blue-River-Mura-CMS-Directory-Traversal-%28SS-2010-0 · Exploit
• 🔥 http://exploit-db.com/exploits/15120 · Exploit
• 🔥 https://exploit-db.com/exploits/15120 · Exploit
• http://secunia.com/advisories/41591 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-3468 · Security Note
• http://getmura.com/index.cfm/blog/critical-security-patch · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3468 · Note
• http://securityfocus.com/bid/43499 · Note