WebGUI 'Asset.pm' Perl Module Handling Code Execution Vulnerability
BID:31947
Info
WebGUI 'Asset.pm' Perl Module Handling Code Execution Vulnerability
| Bugtraq ID: | 31947 |
| Class: | Unknown |
| CVE: |
CVE-2008-4798 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 27 2008 12:00AM |
| Updated: | Apr 16 2015 05:52PM |
| Credit: | WebGUI |
| Vulnerable: |
WebGUI WebGUI 7.5.26 WebGUI WebGUI 7.5.25 WebGUI WebGUI 7.5.13 (beta) WebGUI WebGUI 7.5.11 (beta) |
| Not Vulnerable: |
WebGUI WebGUI 7.5.30 |
Discussion
WebGUI 'Asset.pm' Perl Module Handling Code Execution Vulnerability
WebGUI is prone to a vulnerability that lets attackers execute arbitrary Perl code in the context of the webserver process. This may help the attacker compromise the application; other attacks are also possible.
Versions prior to WebGUI 7.5.30 are vulnerable.
WebGUI is prone to a vulnerability that lets attackers execute arbitrary Perl code in the context of the webserver process. This may help the attacker compromise the application; other attacks are also possible.
Versions prior to WebGUI 7.5.30 are vulnerable.
Exploit / POC
WebGUI 'Asset.pm' Perl Module Handling Code Execution Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
WebGUI 'Asset.pm' Perl Module Handling Code Execution Vulnerability
Solution:
The vendor has released an update to address this issue. Please see the references for more information.
Solution:
The vendor has released an update to address this issue. Please see the references for more information.
References
WebGUI 'Asset.pm' Perl Module Handling Code Execution Vulnerability
References:
References:
- Arbitrary perl code can be executed by any user with upload permission (#8980) (WebGUI)
- WebGUI - Homepage (WebGUI)
- WebGUI 7.5.30 (stable) Released (WebGUI)
- WebGUI Project Page (WebGUI)