FCKeditor Arbitrary File Upload Vulnerability

Bugtraq ID:	18029
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 18 2006 12:00AM
Updated:	May 18 2006 08:58PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	FCKeditor FCKeditor 2.2
Not Vulnerable:	FCKeditor FCKeditor 2.3 beta

FCKeditor Arbitrary File Upload Vulnerability

FCKeditor is prone to an arbitrary file-upload vulnerability.

An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.

This issue affects version 2.2 when file uploads are enabled in 'config.php'; earlier versions may also be vulnerable.

FCKeditor Arbitrary File Upload Vulnerability

This issue can be exploited with a web client.

FCKeditor Arbitrary File Upload Vulnerability

Solution:
The vendor has released version 2.3 beta to address this issue.


FCKeditor FCKeditor 2.2

• FCKeditor FCKeditor_2.3b.tar.gz
  http://prdownloads.sourceforge.net/fckeditor/FCKeditor_2.3b.tar.gz

FCKeditor Arbitrary File Upload Vulnerability

References:

• FCKeditor Home Page (FCKeditor)
  
• Whats New Page (FCKeditor)