Flatnux Arbitrary File Upload and Multiple Local File Include Vulnerabilities

Bugtraq ID:	34599
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 20 2009 12:00AM
Updated:	Apr 21 2009 06:46PM
Credit:	girex
Vulnerable:	Flatnux Flatnux 2009-03-27 Flatnux Flatnux 2009-01-27 Flatnux Flatnux 0
Not Vulnerable:

Flatnux Arbitrary File Upload and Multiple Local File Include Vulnerabilities

Flatnux is prone to multiple local file-include vulnerabilities and an arbitrary-file-upload vulnerability.

An attacker can exploit these issues to upload arbitrary files onto the webserver, execute arbitrary local files within the context of the webserver, and obtain sensitive information.

Flatnux 2009-03-27 is vulnerable; other versions may also be affected.

Flatnux Arbitrary File Upload and Multiple Local File Include Vulnerabilities

An attacker can exploit these issues via a browser.

Flatnux Arbitrary File Upload and Multiple Local File Include Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Flatnux Arbitrary File Upload and Multiple Local File Include Vulnerabilities

References:

• Flatnux Homepage (Flatnux)