Horde Chora Viewer Remote Command Execution Vulnerability
BID:10531
Info
Horde Chora Viewer Remote Command Execution Vulnerability
| Bugtraq ID: | 10531 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 13 2004 12:00AM |
| Updated: | Jun 13 2004 12:00AM |
| Credit: | Discovery of this vulnerability is credited to Stefan Esser <[email protected]> |
| Vulnerable: |
Horde Project Chora 1.2.1 Gentoo Linux 1.4 |
| Not Vulnerable: |
Horde Project Chora 1.2.2 |
Discussion
Horde Chora Viewer Remote Command Execution Vulnerability
Horde Chora Viewer is reported to be prone to a remote command execution vulnerability. The vulnerability is reported to exist due to a lack of sanitization performed on values that may be user-supplied.
Shell metacharacters that are included as a value for the affected URI parameter may result in attacker specified shell commands being executed in an exec() call. Command execution will occur in the context of the affected web server.
Chora versions up to an including version 1.2.1 are reported to be affected by this vulnerability.
Horde Chora Viewer is reported to be prone to a remote command execution vulnerability. The vulnerability is reported to exist due to a lack of sanitization performed on values that may be user-supplied.
Shell metacharacters that are included as a value for the affected URI parameter may result in attacker specified shell commands being executed in an exec() call. Command execution will occur in the context of the affected web server.
Chora versions up to an including version 1.2.1 are reported to be affected by this vulnerability.
Exploit / POC
Horde Chora Viewer Remote Command Execution Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Horde Chora Viewer Remote Command Execution Vulnerability
Solution:
Gentoo Linux has released advisory GLSA 200406-09 addressing this issue. Please see the referenced advisory for further information. Users of affected packages are urged to execute the following as superuser:
emerge sync
emerge -pv ">=net-www/horde-chora-1.2.2"
emerge ">=net-www/horde-chora-1.2.2"
The vendor has released an update to address this issue:
Horde Project Chora 1.2.1
Solution:
Gentoo Linux has released advisory GLSA 200406-09 addressing this issue. Please see the referenced advisory for further information. Users of affected packages are urged to execute the following as superuser:
emerge sync
emerge -pv ">=net-www/horde-chora-1.2.2"
emerge ">=net-www/horde-chora-1.2.2"
The vendor has released an update to address this issue:
Horde Project Chora 1.2.1
-
Horde chora-1.2.2.tar.gz
ftp://ftp.horde.org/pub/chora/chora-1.2.2.tar.gz
References
Horde Chora Viewer Remote Command Execution Vulnerability
References:
References:
- Chora Homepage (Horde Project)