Uebimiau Webmail 'admin/editor.php' Arbitrary File Overwrite Vulnerability
BID:35374
Info
Uebimiau Webmail 'admin/editor.php' Arbitrary File Overwrite Vulnerability
| Bugtraq ID: | 35374 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 12 2009 12:00AM |
| Updated: | Jun 19 2009 07:29PM |
| Credit: | GoLd_M |
| Vulnerable: |
UebiMiau UebiMiau 2.7.10 UebiMiau UebiMiau 2.7.9 UebiMiau UebiMiau 2.7.2 UebiMiau UebiMiau 3.2.0-1.8 |
| Not Vulnerable: | |
Discussion
Uebimiau Webmail 'admin/editor.php' Arbitrary File Overwrite Vulnerability
Uebimiau Webmail is prone to a vulnerability that could permit an attacker to overwrite arbitrary files within the context of the webserver process.
The attacker can exploit this issue to corrupt the application's configuration file. Successful exploits may allow the attacker to execute arbitrary script code or perform other attacks.
Uebimiau Webmail is prone to a vulnerability that could permit an attacker to overwrite arbitrary files within the context of the webserver process.
The attacker can exploit this issue to corrupt the application's configuration file. Successful exploits may allow the attacker to execute arbitrary script code or perform other attacks.
Exploit / POC
Uebimiau Webmail 'admin/editor.php' Arbitrary File Overwrite Vulnerability
Attackers may exploit this issue via a browser.
Attackers may exploit this issue via a browser.
Solution / Fix
Uebimiau Webmail 'admin/editor.php' Arbitrary File Overwrite Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Uebimiau Webmail 'admin/editor.php' Arbitrary File Overwrite Vulnerability
References:
References:
- UebiMiau Homepage (UebiMiau)