Gnut Gnutella Client Arbitrary Script Code Execution Vulnerability

Bugtraq ID:	3267
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 30 2001 12:00AM
Updated:	Aug 30 2001 12:00AM
Credit:	This vulnerability was submitted to BugTraq on August 30th, 2001 by Philipp Krammer <[email protected]>.
Vulnerable:	Robert Munafo Gnut 0.4.27 Robert Munafo Gnut 0.4.26 Robert Munafo Gnut 0.4.25 Robert Munafo Gnut 0.4.24 Robert Munafo Gnut 0.4.23 Robert Munafo Gnut 0.4.22 Robert Munafo Gnut 0.4.21 Robert Munafo Gnut 0.4.20
Not Vulnerable:	Robert Munafo Gnut 0.4.28

Gnut Gnutella Client Arbitrary Script Code Execution Vulnerability

Gnut is a free, open-source console-based Gnutella file-sharing client for Microsoft Windows and Linux systems.

A problem exists with Gnut's web interface. Webfrontend allows users to perform searches, but when the results of a search are returned the interface will not strip HTML tags from filenames. An attacker could exploit this issue by embedding script code in a filename, which will may be able to be run locally on the user when the file turns up in a search.

This issue may allow the attacker to gain unauthorized access to resources on the system of the Gnut user.

Gnut Gnutella Client Arbitrary Script Code Execution Vulnerability

This issue does not require an exploit.

Gnut Gnutella Client Arbitrary Script Code Execution Vulnerability

Solution:
The vendor has addressed this issue in version 0.4.28.


Robert Munafo Gnut 0.4.27

• Robert Munafo Gnut 0.4.28
  http://www.gnutelliums.com/linux_unix/gnut/