RunCMS Arbitrary Variable Overwrite Vulnerability
BID:14634
Info
RunCMS Arbitrary Variable Overwrite Vulnerability
| Bugtraq ID: | 14634 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 22 2005 12:00AM |
| Updated: | Aug 22 2005 12:00AM |
| Credit: | James Bercegay of the GulfTech Security Research Team is credited with the discovery of this vulnerability. |
| Vulnerable: |
RunCMS RunCMS 1.2 RunCMS RunCMS 1.1 A RunCMS RunCMS 1.1 |
| Not Vulnerable: | |
Discussion
RunCMS Arbitrary Variable Overwrite Vulnerability
RunCMS is prone to a vulnerability that permits the overwriting of arbitrary variables.
RunCMS is prone to a vulnerability that permits the overwriting of arbitrary variables.
An attacker can exploit this vulnerability to overwrite arbitrary application global variables. The attacker supplies new values through use of the POST method.
Successful exploitation of this vulnerability can have multiple ramifications depending on the variables overwritten and the scope and permissions of the vulnerable application.
RunCMS is prone to a vulnerability that permits the overwriting of arbitrary variables.
RunCMS is prone to a vulnerability that permits the overwriting of arbitrary variables.
An attacker can exploit this vulnerability to overwrite arbitrary application global variables. The attacker supplies new values through use of the POST method.
Successful exploitation of this vulnerability can have multiple ramifications depending on the variables overwritten and the scope and permissions of the vulnerable application.
Exploit / POC
RunCMS Arbitrary Variable Overwrite Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
RunCMS Arbitrary Variable Overwrite Vulnerability
Solution:
Reports indicate the vendor has addressed this issue in the latest release of RunCMS. Symantec has not been able to verify this at the time of this writing.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Reports indicate the vendor has addressed this issue in the latest release of RunCMS. Symantec has not been able to verify this at the time of this writing.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
RunCMS Arbitrary Variable Overwrite Vulnerability
References:
References:
- RunCMS Multiple Vulnerabilities (GulfTech Research)
- RunCms Homepage (RunCms)