PT-2013-2187 · Apache+1 · Apache Commons Fileupload+1

Published 2013-03-15 · Updated 2024-05-27 · CVE-2013-0248

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:L/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apache Commons FileUpload versions 1.0 through 1.2.2

Description The default configuration of javax.servlet.context.tempdir in Apache Commons FileUpload uses the /tmp directory for uploaded files, which allows local users to overwrite arbitrary files via an unspecified symlink attack.

Recommendations For Apache Commons FileUpload versions 1.0 through 1.2.2, consider changing the default configuration of javax.servlet.context.tempdir to a directory that is not accessible by local users to prevent arbitrary file overwrites. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Weakness Enumeration

CWE-276

CWE-264

Related Identifiers

ALT-PU-2014-3192

CVE-2013-0248

GHSA-VM69-474V-7Q2W

Affected Products

Alt Linux

Apache Commons Fileupload

References · 19

• https://osv.dev/vulnerability/DEBIAN-CVE-2013-0248 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-0248 · Security Note
• https://osv.dev/vulnerability/GHSA-vm69-474v-7q2w · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2013-0248 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0050 · Security Note
• http://marc.info/?l=bugtraq&m=144050155601375&w=2 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0248 · Security Note
• https://security.gentoo.org/glsa/202107-39 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-03337 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2013-0248 · Vendor Advisory
• https://errata.altlinux.org/ALT-PU-2014-3192 · Vendor Advisory
• https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/apache_commons_fileupload_dos.rb · Note
• http://osvdb.org/90906 · Note
• http://securityfocus.com/bid/58326 · Note
• http://oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html · Note