KnowledgeTree Multiple Unspecified Vulnerabilities
BID:32920
Info
KnowledgeTree Multiple Unspecified Vulnerabilities
| Bugtraq ID: | 32920 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 15 2008 12:00AM |
| Updated: | Dec 19 2008 08:01PM |
| Credit: | KnowledgeTree |
| Vulnerable: |
knowledgeTree KnowledgeTree 3.5.4 |
| Not Vulnerable: |
knowledgeTree KnowledgeTree 3.5.4a |
Discussion
KnowledgeTree Multiple Unspecified Vulnerabilities
KnowledgeTree is prone to multiple vulnerabilities, including an information-disclosure issue, a security-bypass vulnerability, and multiple cross-site scripting vulnerabilities.
An attacker can exploit these issues to bypass security restrictions, to view sensitive information, and to steal cookie-based authentication credentials. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
KnowledgeTree is prone to multiple vulnerabilities, including an information-disclosure issue, a security-bypass vulnerability, and multiple cross-site scripting vulnerabilities.
An attacker can exploit these issues to bypass security restrictions, to view sensitive information, and to steal cookie-based authentication credentials. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.
Exploit / POC
KnowledgeTree Multiple Unspecified Vulnerabilities
Attackers can exploit the information-disclosure and security-bypass vulnerabilities via a browser. Attackers can exploit the cross-site scripting issues by enticing an unsuspecting victim to follow a malicious URI.
Attackers can exploit the information-disclosure and security-bypass vulnerabilities via a browser. Attackers can exploit the cross-site scripting issues by enticing an unsuspecting victim to follow a malicious URI.
Solution / Fix
KnowledgeTree Multiple Unspecified Vulnerabilities
Solution:
The vendor has released a fix. Please see the references for more information.
knowledgeTree KnowledgeTree 3.5.4
Solution:
The vendor has released a fix. Please see the references for more information.
knowledgeTree KnowledgeTree 3.5.4
-
knowledgeTree ktdms-src-oss-3.5.4a.tgz
http://freshmeat.net/redir/knowledgetree/41954/url_tgz/ktdms-src-oss-3 .5.4a.tgz
References
KnowledgeTree Multiple Unspecified Vulnerabilities
References:
References:
- KnowledgeTree Hompage (KnowledgeTree)
- KnowledgeTree 3.5.4a release (KnowledgeTree)