CGI-Club imTRBBS Remote Command Execution Vulnerability

Bugtraq ID:	14091
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 29 2005 12:00AM
Updated:	Jun 29 2005 12:00AM
Credit:	[email protected] is credited with the discovery of this vulnerability.
Vulnerable:	cgi-club imTRBBS 1.0 2
Not Vulnerable:

CGI-Club imTRBBS Remote Command Execution Vulnerability

imTRBBS is affected by a remote command execution vulnerability.

Specifically, an attacker can supply arbitrary commands prefixed with the '|' character through the 'im_trbbs.cgi' script that will be executed in the context of the Web server running the application.

This issue is reported to affect imTRBBS version 1.02; other versions may also be vulnerable.

CGI-Club imTRBBS Remote Command Execution Vulnerability

No exploit is required.

The following proof of concept URI is available:
http://www.example.com/cgi-bin/im_trbbs.cgi?uid=parameter&df=bbs.dat|ls|

CGI-Club imTRBBS Remote Command Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

CGI-Club imTRBBS Remote Command Execution Vulnerability

References:

• imTRBBS Homepage (CGI-Club)
  
• Original imTRBBS(ver1.02) and prior remote command execution ([email protected])