WebMod Multiple Remote Security Vulnerabilities

Bugtraq ID:	29031
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	May 03 2008 12:00AM
Updated:	May 07 2008 02:55AM
Credit:	Luigi Auriemma
Vulnerable:	WebMod WebMod 0.48 WebMod WebMod 0.47
Not Vulnerable:

WebMod Multiple Remote Security Vulnerabilities

WebMod is prone to multiple remote security vulnerabilities, including a directory-traversal issue, a stack-based buffer-overflow issue, multiple memory-corruption issues, and an information-disclosure issue.

Attackers can exploit these issues to execute arbitrary code with the privileges of the user running the affected application, obtain sensitive information to aid in further attacks, or cause denial-of-service conditions.

WebMod 0.48 is vulnerable; other versions may also be affected.

WebMod Multiple Remote Security Vulnerabilities

The following proofs of concept and an exploit are available:

• /data/vulnerabilities/exploits/webmodz.zip
• /data/vulnerabilities/exploits/29031.php

WebMod Multiple Remote Security Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

WebMod Multiple Remote Security Vulnerabilities

References:

• WebMod Product Page (WebMod)
  
• Multiple vulnerabilities in WebMod 0.48 (Luigi Auriemma )