PECL Alternative PHP Cache Local HTML Injection Vulnerability

Bugtraq ID:	32934
Class:	Input Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Dec 19 2008 12:00AM
Updated:	Dec 29 2008 09:22PM
Credit:	Moritz Naumann
Vulnerable:	PECL APC 3.1.1 PECL APC 3.0.19
Not Vulnerable:

PECL Alternative PHP Cache Local HTML Injection Vulnerability

PECL Alternative PHP Cache is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or to control how the site is rendered to the user. Other attacks are also possible.

Alternative PHP Cache 3.1.1 and 3.0.19 are vulnerable; other versions may also be affected.

PECL Alternative PHP Cache Local HTML Injection Vulnerability

This issue can be exploited via common commands.

The following example exploit is available:

• /data/vulnerabilities/exploits/32934.txt

PECL Alternative PHP Cache Local HTML Injection Vulnerability

Solution:
Updates are available via CVS; please see the references for more information.

PECL Alternative PHP Cache Local HTML Injection Vulnerability

References:

• [cvs] Diff of /pecl/apc/apc.php - Revision 3.74 (PECL)
  
• Alternative PHP Cache Homepage (PECL)
  
• PHP APC vulnerable to local attacks (Moritz Naumann )