PostNuke PN_BBCode Local File Include Vulnerability

Bugtraq ID:	14958
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 28 2005 12:00AM
Updated:	Sep 28 2005 12:00AM
Credit:	Maksymilian Arciemowicz and Devin Hayes are credited with the discovery of this vulnerability.
Vulnerable:	PostNuke Development Team PostNuke Phoenix 0.760
Not Vulnerable:	PostNuke Development Team PostNuke Phoenix 0.761

PostNuke PN_BBCode Local File Include Vulnerability

PostNuke is prone to a local file include vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web server process. This may potentially facilitate unauthorized access.

It should be noted that this issue may also be leveraged to read arbitrary files on an affected computer with the privileges of the Web server.

PostNuke PN_BBCode Local File Include Vulnerability

No exploit is required.

PostNuke PN_BBCode Local File Include Vulnerability

Solution:
The vendor has released version 0.761 to address this issue.


PostNuke Development Team PostNuke Phoenix 0.760

• PostNuke PostNuke 0.7.6.1.tar.gz
  http://news.postnuke.com/Downloads-req-getit-lid-517.html

PostNuke PN_BBCode Local File Include Vulnerability

References:

• Anonymous posting via Comments module (PostNuke)
  
• Local file inclusion via pn_bbcode (PostNuke)
  
• PostNuke Product Page (PostNuke)