OCS Inventory NG Server Multiple SQL Injection Vulnerabilities

Bugtraq ID:	35152
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 01 2009 12:00AM
Updated:	Mar 19 2015 08:25AM
Credit:	Nico Leidecker
Vulnerable:	Ocsinventory-Ng OCS Inventory NG Server 1.02 Ocsinventory-Ng OCS Inventory NG Server 1.01
Not Vulnerable:	Ocsinventory-Ng OCS Inventory NG Server 1.2.1

OCS Inventory NG Server Multiple SQL Injection Vulnerabilities

OCS Inventory NG Server is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

Versions prior to OCS Inventory NG Server 1.02.1 are vulnerable.

OCS Inventory NG Server Multiple SQL Injection Vulnerabilities

Attackers can use a browser to exploit these issues.

The following example URI is available:

http://www.example.com/ocsreports/download.php?n=1&dl=2&o=3&=4'union+all+select+concat(id,':',passwd)+from+operators%23

OCS Inventory NG Server Multiple SQL Injection Vulnerabilities

Solution:
The vendor has released updates. Please see the references for details.


Ocsinventory-Ng OCS Inventory NG Server 1.01

• OCS Inventory Team OCSNG_UNIX_SERVER-1.02.1.tar.gz
  https://sourceforge.net/project/downloading.php?group_id=58373&filenam e=OCSNG_UNIX_SERVER-1.02.1.tar.gz&a=95786279

Ocsinventory-Ng OCS Inventory NG Server 1.02

• OCS Inventory Team OCSNG_UNIX_SERVER-1.02.1.tar.gz
  https://sourceforge.net/project/downloading.php?group_id=58373&filenam e=OCSNG_UNIX_SERVER-1.02.1.tar.gz&a=95786279

OCS Inventory NG Server Multiple SQL Injection Vulnerabilities

References:

• OCS Inventory NG 1.02.1 with critical security fixes published ! (OCS Inventory Team)
  
• OCS Inventory NG Homepage (OCS Inventory Team)
  
• OCS Inventory NG 1.02 - Multiple SQL Injections (Nico Leidecker )