PHPThumb Arbitrary File Information Disclosure Vulnerability
BID:13842
Info
PHPThumb Arbitrary File Information Disclosure Vulnerability
| Bugtraq ID: | 13842 |
| Class: | Input Validation Error |
| CVE: |
CVE-2005-1898 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 02 2005 12:00AM |
| Updated: | Jul 12 2009 02:56PM |
| Credit: | The vendor credits mr.agility <[email protected]> for the discovery of this vulnerability. This vulnerability was announced by the vendor. |
| Vulnerable: |
phpThumb phpThumb 1.5.3 phpThumb phpThumb 1.5.2 phpThumb phpThumb 1.5.1 phpThumb phpThumb 1.5 |
| Not Vulnerable: |
phpThumb phpThumb 1.5.4 |
Discussion
PHPThumb Arbitrary File Information Disclosure Vulnerability
phpThumb is prone to an information disclosure vulnerability. This is due to a failure in the application to properly sanitize user-supplied input.
By design the application displays detailed information of picture files. The problem presents itself due to a failure in the application to ensure the file being displayed is a picture file.
An attacker may exploit this vulnerability to retrieve the contents of arbitrary files with the privileges of the Web server process. This information could be used to aid in further attacks against the underlying system.
phpThumb is prone to an information disclosure vulnerability. This is due to a failure in the application to properly sanitize user-supplied input.
By design the application displays detailed information of picture files. The problem presents itself due to a failure in the application to ensure the file being displayed is a picture file.
An attacker may exploit this vulnerability to retrieve the contents of arbitrary files with the privileges of the Web server process. This information could be used to aid in further attacks against the underlying system.
Exploit / POC
PHPThumb Arbitrary File Information Disclosure Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
PHPThumb Arbitrary File Information Disclosure Vulnerability
Solution:
The vendor has addressed this issue in phpThumb version 1.5.4:
phpThumb phpThumb 1.5
phpThumb phpThumb 1.5.1
phpThumb phpThumb 1.5.2
phpThumb phpThumb 1.5.3
Solution:
The vendor has addressed this issue in phpThumb version 1.5.4:
phpThumb phpThumb 1.5
-
phpThumb phpThumb_1.5.4.zip
http://prdownloads.sourceforge.net/phpthumb/phpThumb_1.5.4.zip?downloa d
phpThumb phpThumb 1.5.1
-
phpThumb phpThumb_1.5.4.zip
http://prdownloads.sourceforge.net/phpthumb/phpThumb_1.5.4.zip?downloa d
phpThumb phpThumb 1.5.2
-
phpThumb phpThumb_1.5.4.zip
http://prdownloads.sourceforge.net/phpthumb/phpThumb_1.5.4.zip?downloa d
phpThumb phpThumb 1.5.3
-
phpThumb phpThumb_1.5.4.zip
http://prdownloads.sourceforge.net/phpthumb/phpThumb_1.5.4.zip?downloa d
References
PHPThumb Arbitrary File Information Disclosure Vulnerability
References:
References:
- phpThumb Changelog (phpThumb)
- phpThumb Homepage (phpThumb)