Mantis 'account_prefs_update.php' Local File Include Vulnerability

Bugtraq ID:	30354
Class:	Input Validation Error
CVE:	CVE-2008-3333
Remote:	Yes
Local:	No
Published:	Jun 17 2008 12:00AM
Updated:	May 07 2015 05:12PM
Credit:	SEC Consult Vulnerability Lab
Vulnerable:	Mantis Mantis 1.1.1 Mantis Mantis 1.1 Mantis Mantis 1.1.0a2 Gentoo Linux
Not Vulnerable:	Mantis Mantis 1.1.2

Mantis 'account_prefs_update.php' Local File Include Vulnerability

Mantis is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability using directory-traversal strings to view files and execute local scripts in the context of the webserver process. This may aid in further attacks.

Versions prior to Mantis 1.1.2 are vulnerable.

Mantis 'account_prefs_update.php' Local File Include Vulnerability

Attackers can exploit this issue via a browser.

Mantis 'account_prefs_update.php' Local File Include Vulnerability

Solution:
The vendor released Mantis 1.1.2 to address this issue. Please see the references for more information.

Mantis 'account_prefs_update.php' Local File Include Vulnerability

References:

• Bugzilla Bug 456044: mantis: arbitrary file inclusion through user preferences p (Red Hat)
  
• Mantis Changelog (Mantis)
  
• Mantis Homepage (Mantis)