RSGallery2 Component for Mambo/Joomla! Backdoor Vulnerability

Bugtraq ID:	35106
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	May 26 2009 12:00AM
Updated:	May 27 2009 09:29PM
Credit:	Jan van Niekerk
Vulnerable:	RSGallery2 RsGallery2 1.14.3 RSGallery2 RsGallery2 2.0.0b1
Not Vulnerable:

RSGallery2 Component for Mambo/Joomla! Backdoor Vulnerability

RSGallery2 is prone to a backdoor vulnerability.

Attackers can exploit this issue to execute arbitrary commands in the context of the application. Successful attacks will compromise the affected application and possibly the webserver or computer.

RSGallery2 1.14.3 and 2.0.0b1 are vulnerable; other versions may also be affected.

RSGallery2 Component for Mambo/Joomla! Backdoor Vulnerability

Attackers can use a browser to exploit this issue.

RSGallery2 Component for Mambo/Joomla! Backdoor Vulnerability

Solution:
NOTE: The vendor reports that the vulnerable components were not official releases, but instead malicious copies that had been placed on the JoomlaCode project page. Users are advised to contact the vendor to obtain an untainted copy of the application.

RSGallery2 Component for Mambo/Joomla! Backdoor Vulnerability

References:

• Vendor Homepage (RSGallery2)
  
• Backdoor in com_rsgallery2 gallery extension for joomla (Jan van Niekerk )
  
• Re: Backdoor in com_rsgallery2 gallery extension for joomla (Jonah Braun )