Greg Matthews Classifieds.cgi Metacharacter Vulnerability

Bugtraq ID:	2020
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Dec 15 1998 12:00AM
Updated:	Dec 15 1998 12:00AM
Credit:	Discovery credit is not currently known.
Vulnerable:	Greg Matthews Classifieds.cgi 1.0 - Larry Wall Perl 5.6 - Larry Wall Perl 5.0 05_003 - Larry Wall Perl 5.0 05 - Larry Wall Perl 5.0 04_05 - Larry Wall Perl 5.0 04 - Larry Wall Perl 5.0 03
Not Vulnerable:

Greg Matthews Classifieds.cgi Metacharacter Vulnerability

Classifieds.cgi is a perl script (part of the classifieds package by Greg Matthews) which provides simple classified ads to web sites. Due to improper input validation it can be used to read files on the host machine, with the privileges of the web server. This can be accomplished by embedding the input redirection metacharacter along with a filename into the form field used for e-mail address entry (<input name=return>). Any file that the web server process has read access to can be retrieved.

Greg Matthews Classifieds.cgi Metacharacter Vulnerability

Submit email@host</etc/passwd as e-mail address.

Greg Matthews Classifieds.cgi Metacharacter Vulnerability

Solution:
Currently the SecurityFocus staff are not ware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Greg Matthews Classifieds.cgi Metacharacter Vulnerability

References:

• Classifieds (Notts.net)
  
• The Most Comprehensive List of CGI & httpd Bugs ([email protected])