Drupal Comment Upload Module Upload Validation Function Arbitrary File Upload Vulnerability

Bugtraq ID:	27544
Class:	Input Validation Error
CVE:	CVE-2008-0569
Remote:	Yes
Local:	No
Published:	Jan 31 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	webernet is credited with the discovery of this vulnerability.
Vulnerable:	Drupal Comment Upload 5.x Drupal Comment Upload 4.7.x
Not Vulnerable:	Drupal Comment Upload 5.x-0.1 Drupal Comment Upload 4.7.x-0.1

Drupal Comment Upload Module Upload Validation Function Arbitrary File Upload Vulnerability

The Drupal Comment Upload module is prone to an arbitrary-file-upload vulnerability because the application fails to sufficiently sanitize user-supplied input.

Exploiting this issue could allow an attacker to upload and execute arbitrary script code in the context of the affected webserver process.

Drupal Comment Upload Module Upload Validation Function Arbitrary File Upload Vulnerability

Attackers may exploit this issue through a browser.

Drupal Comment Upload Module Upload Validation Function Arbitrary File Upload Vulnerability

Solution:
The vendor released an update to address this issue. Please see the references for more information.


Drupal Comment Upload 4.7.x

• Drupal comment_upload-4.7.x-0.1.tar.gz
  http://ftp.drupal.org/files/projects/comment_upload-4.7.x-0.1.tar.gz

Drupal Comment Upload 5.x

• Drupal comment_upload-5.x-0.1.tar.gz
  http://ftp.drupal.org/files/projects/comment_upload-5.x-0.1.tar.gz

Drupal Comment Upload Module Upload Validation Function Arbitrary File Upload Vulnerability

References:

• Drupal Comment Upload Homepage (Drupal)
  
• Drupal Comment_upload 4.7.x-0.1 Release Notes (Drupal)
  
• Drupal Comment_Upload 5.x-0.1 Release Notes (Drupal)
  
• Drupal Security Advisory DRUPAL-SA-2008-015 (Drupal)