Teca Scripts Guestex Multiple Input Validation Vulnerabilities

Bugtraq ID:	16711
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 17 2006 12:00AM
Updated:	Jun 08 2006 08:46PM
Credit:	Aliaksandr Hartsuyeu is credited with the discovery of these vulnerabilities.
Vulnerable:	Teca Guestex 1.0
Not Vulnerable:

Teca Scripts Guestex Multiple Input Validation Vulnerabilities

Guestex is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit these issues to execute all of the following in the context of the webserver process:

- arbitrary shell commands
- attacker-supplied HTML
- attacker-supplied script code

This may enable an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user, or facilitate a compromise of the application and the underlying computer; other attacks are also possible.

Teca Scripts Guestex Multiple Input Validation Vulnerabilities

This issue can be exploited through a web client.

The following exploit for the code-execution issue is available:

• /data/vulnerabilities/exploits/GUESTEX-exec.pl

Teca Scripts Guestex Multiple Input Validation Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Teca Scripts Guestex Multiple Input Validation Vulnerabilities

References:

• Guestex Homepage (Teca)
  
• Guestex Shell Command Execution Vulnerability (eVuln)
  
• Guestex XSS Vulnerability (eVuln)
  
• GUESTEX guestbook code execution (root )