TYPO3 Frontend Filemanager Extension Unspecified Code Execution Vulnerability

Bugtraq ID:	29837
Class:	Unknown
CVE:	CVE-2008-6685
Remote:	Yes
Local:	No
Published:	Jun 19 2008 12:00AM
Updated:	Apr 17 2009 11:06PM
Credit:	Marcus Krause
Vulnerable:	Typo3 Frontend Filemanager 0.6.1
Not Vulnerable:	Typo3 Frontend Filemanager 0.6.2

TYPO3 Frontend Filemanager Extension Unspecified Code Execution Vulnerability

TYPO3 Frontend Filemanager extension is prone to an unspecified code-execution vulnerability.

Successful exploits allow attackers to execute arbitrary code in the context of the webserver hosting the vulnerable application. This facilitates the remote compromise of affected computers.

Versions prior to Frontend Filemanager 0.6.2 are vulnerable.

TYPO3 Frontend Filemanager Extension Unspecified Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TYPO3 Frontend Filemanager Extension Unspecified Code Execution Vulnerability

Solution:
Frontend Filemanager 0.6.2 is available to address this issue. Please see the references for more information.

TYPO3 Frontend Filemanager Extension Unspecified Code Execution Vulnerability

References:

• Frontend Filemanager Product Page (Typo3)
  
• Synnefoims Homepage (synnefoims)
  
• TYPO3 Collective Security Bulletin TYPO3-20080619-1: Several vulnerabilities in (TYPO3)
  
• Weiterer Security-Fix: Filemanager 0.6.2 (Typo3)