TikiWiki Tiki-User_Preferences.PHP Directory Traversal Vulnerability

Bugtraq ID:	15392
Class:	Input Validation Error
CVE:	CVE-2005-1925
Remote:	Yes
Local:	No
Published:	Nov 11 2005 12:00AM
Updated:	Nov 11 2005 12:00AM
Credit:	Maciej Piotr Falkiewicz and an anonymous contributor are credited with the discovery of this vulnerability.
Vulnerable:	TikiWiki Project TikiWiki 1.8.5 TikiWiki Project TikiWiki 1.8.4 + Gentoo Linux
Not Vulnerable:	TikiWiki Project TikiWiki 1.9.1

TikiWiki Tiki-User_Preferences.PHP Directory Traversal Vulnerability

TikiWiki is prone to a directory traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

A remote attacker may exploit this vulnerability to reveal files that contain potentially sensitive information. Information that is harvested in this manner may then be used to aid in further attacks against the software and the computer that is hosting the software.

TikiWiki Tiki-User_Preferences.PHP Directory Traversal Vulnerability

No exploit is required.

TikiWiki Tiki-User_Preferences.PHP Directory Traversal Vulnerability

Solution:
The vendor has addressed this issue in version 1.9.1 and later:


TikiWiki Project TikiWiki 1.8.5

• Tikiwiki Project tikiwiki-1.9.1.1.tar.gz
  http://prdownloads.sourceforge.net/tikiwiki/tikiwiki-1.9.1.1.tar.gz

TikiWiki Tiki-User_Preferences.PHP Directory Traversal Vulnerability

References:

• TikiWiki Homepage (TikiWiki Project)
  
• Tikiwiki tiki-user_preferences Command Injection Vulnerability (iDEFENSE)