ZNC File Upload Directory Traversal Vulnerability

Bugtraq ID:	35757
Class:	Input Validation Error
CVE:	CVE-2009-2658
Remote:	Yes
Local:	No
Published:	Jul 21 2009 12:00AM
Updated:	Apr 13 2015 09:37PM
Credit:	Reported by the vendor
Vulnerable:	ZNC ZNC 0.066 ZNC ZNC 0.064 ZNC ZNC 0.062 ZNC ZNC 0.060 Gentoo Linux Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:	ZNC ZNC 0.072

ZNC File Upload Directory Traversal Vulnerability

ZNC is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue can allow an authenticated attacker to upload and overwrite files on the affected computer. Successful exploits will lead to other attacks.

Versions prior to ZNC 0.072 are vulnerable,

ZNC File Upload Directory Traversal Vulnerability

Attackers can use readily available tools to exploit this issue.

ZNC File Upload Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 4.0 arm

• Debian znc_0.045-3+etch3_arm.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.045-3+etch3_a rm.deb

Debian Linux 5.0 ia-64

• Debian znc_0.058-2+lenny3_ia64.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.058-2+lenny3_ ia64.deb

Debian Linux 4.0 powerpc

• Debian znc_0.045-3+etch3_powerpc.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.045-3+etch3_p owerpc.deb

Debian Linux 5.0 alpha

• Debian znc_0.058-2+lenny3_alpha.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.058-2+lenny3_ alpha.deb

Debian Linux 5.0 ia-32

• Debian znc_0.058-2+lenny3_i386.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.058-2+lenny3_ i386.deb

ZNC ZNC 0.060

• ZNC znc-extra-0.072.tar.gz
  http://sourceforge.net/projects/znc/files/znc-extra/znc-extra-0.072.ta r.gz/download

Debian Linux 5.0 s/390

• Debian znc_0.058-2+lenny3_s390.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.058-2+lenny3_ s390.deb

Debian Linux 5.0 mipsel

• Debian znc_0.058-2+lenny3_mipsel.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.058-2+lenny3_ mipsel.deb

Debian Linux 4.0 amd64

• Debian znc_0.045-3+etch3_amd64.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.045-3+etch3_a md64.deb

Debian Linux 4.0 ia-32

• Debian znc_0.045-3+etch3_i386.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.045-3+etch3_i 386.deb

Debian Linux 5.0 hppa

• Debian znc_0.058-2+lenny3_hppa.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.058-2+lenny3_ hppa.deb

Debian Linux 4.0 hppa

• Debian znc_0.045-3+etch3_hppa.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.045-3+etch3_h ppa.deb

Debian Linux 4.0 sparc

• Debian znc_0.045-3+etch3_sparc.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.045-3+etch3_s parc.deb

Debian Linux 4.0 s/390

• Debian znc_0.045-3+etch3_s390.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.045-3+etch3_s 390.deb

Debian Linux 5.0 arm

• Debian znc_0.058-2+lenny3_arm.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.058-2+lenny3_ arm.deb

Debian Linux 4.0 alpha

• Debian znc_0.045-3+etch3_alpha.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.045-3+etch3_a lpha.deb

Debian Linux 5.0 armel

• Debian znc_0.058-2+lenny3_armel.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.058-2+lenny3_ armel.deb

ZNC ZNC 0.066

• ZNC znc-extra-0.072.tar.gz
  http://sourceforge.net/projects/znc/files/znc-extra/znc-extra-0.072.ta r.gz/download

Debian Linux 5.0 amd64

• Debian znc_0.058-2+lenny3_amd64.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.058-2+lenny3_ amd64.deb

Debian Linux 4.0 mipsel

• Debian znc_0.045-3+etch3_mipsel.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.045-3+etch3_m ipsel.deb

Debian Linux 5.0 mips

• Debian znc_0.058-2+lenny3_mips.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.058-2+lenny3_ mips.deb

ZNC ZNC 0.062

• ZNC znc-extra-0.072.tar.gz
  http://sourceforge.net/projects/znc/files/znc-extra/znc-extra-0.072.ta r.gz/download

ZNC ZNC 0.064

• ZNC znc-extra-0.072.tar.gz
  http://sourceforge.net/projects/znc/files/znc-extra/znc-extra-0.072.ta r.gz/download

Debian Linux 5.0 powerpc

• Debian znc_0.058-2+lenny3_powerpc.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.058-2+lenny3_ powerpc.deb

Debian Linux 4.0 ia-64

• Debian znc_0.045-3+etch3_ia64.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.045-3+etch3_i a64.deb

Debian Linux 4.0 mips

• Debian znc_0.045-3+etch3_mips.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.045-3+etch3_m ips.deb

Debian Linux 5.0 sparc

• Debian znc_0.058-2+lenny3_sparc.deb
  http://security.debian.org/pool/updates/main/z/znc/znc_0.058-2+lenny3_ sparc.deb

ZNC File Upload Directory Traversal Vulnerability

References:

• Fix a high-impact directory traversal bug (ZNC)
  
• ZNC Home Page (ZNC)