PT-2012-3405 · Drupal · Finder

Kurt Seifried · Published 2012-08-28 · Updated 2012-08-29 · CVE-2012-1641

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Finder module versions 6.x-1.x before 6.x-1.26 Finder module versions 7.x-1.x Finder module versions 7.x-2.x before 7.x-2.0-alpha8

Description The issue allows remote authenticated users with the administer finder permission to execute arbitrary PHP code. This is achieved via the "admin/build/finder/import" API endpoint. The finder import function in the Finder module is vulnerable to this issue.

Recommendations For Finder module version 6.x-1.x, update to version 6.x-1.26 or later. For Finder module version 7.x-1.x, update to a version that includes the fix, which is at least 7.x-2.0-alpha8 or later for the 7.x-2.x branch. For Finder module version 7.x-2.x, update to version 7.x-2.0-alpha8 or later. As a temporary workaround, consider restricting access to the finder import function and the "admin/build/finder/import" API endpoint for users with the administer finder permission.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2012-1641

Affected Products

Finder

References · 12

• 🔥 http://madirish.net/content/drupal-finder-6x-19-xss-and-remote-code-execution-vulnerabilities · Exploit
• https://drupal.org/node/1432970 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-1641 · Security Note
• http://drupal.org/node/1432320 · Patch
• http://secunia.com/advisories/47915 · Vendor Advisory
• http://drupal.org/node/1432318 · Patch
• http://secunia.com/advisories/47943 · Vendor Advisory
• http://openwall.com/lists/oss-security/2012/03/16/9 · Note
• http://openwall.com/lists/oss-security/2012/03/19/9 · Note
• http://osvdb.org/79014 · Note
• http://openwall.com/lists/oss-security/2012/04/07/1 · Note
• http://drupalcode.org/project/finder.git/commit/bc0cc82 · Note