Adobe Graphics Server / Document Server Remote Command Execution Vulnerability

Bugtraq ID:	17113
Class:	Design Error
CVE:	CVE-2006-1182
Remote:	Yes
Local:	No
Published:	Mar 15 2006 12:00AM
Updated:	Mar 16 2006 10:05PM
Credit:	Discovered by Tan Chew Keong, Secunia Research.
Vulnerable:	Adobe Graphics Server 2.1 Adobe Graphics Server 2.0 Adobe Document Server 6.0 Adobe Document Server 5.0
Not Vulnerable:

Adobe Graphics Server / Document Server Remote Command Execution Vulnerability

Adobe Graphics Server and Document Server are prone to a vulnerability that may allow remote attackers to:

- access arbitrary graphics or PDF files
- place arbitrary graphics or PDF files on a server
- gain unauthorized access to a computer
- potentially execute arbitrary code.

The code execution is triggered when a user interactively logs into the Adobe Server service account. Adobe Server is installed as SYSTEM by default, which can allow this vulnerability to be triggered when anyone logs into the server interactively. The server may also be configured to run with lower privileges.

Adobe Graphics Server 2.0, 2.1 and Adobe Document Server 5.0, 6.0 running on Windows are affected.

Adobe Graphics Server / Document Server Remote Command Execution Vulnerability


An exploit is not required.

Adobe Graphics Server / Document Server Remote Command Execution Vulnerability

Solution:

Adobe has released an advisory containing workarounds to address this issue. Please see references for more information.

Adobe Graphics Server / Document Server Remote Command Execution Vulnerability

References:

• Adobe Homepage (Adobe)
  
• Security Advisory: Adobe Graphics Server and Adobe Document Server configuration (Adobe)
  
• Secunia Research: Adobe Document/Graphics Server File URI Resource Access (Secunia Research )