CSVForm Remote Arbitrary Command Execution Vulnerability
BID:3668
Info
CSVForm Remote Arbitrary Command Execution Vulnerability
| Bugtraq ID: | 3668 |
| Class: | Input Validation Error |
| CVE: |
CVE-2001-1187 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 11 2001 12:00AM |
| Updated: | Jul 11 2009 09:06AM |
| Credit: | Discovered by "Jason Gomes" <[email protected]> and posted to the BugTraq mailing list on December 11, 2001. |
| Vulnerable: |
Mutasem Abudahab CSVFormPlus 1.0 Mutasem Abudahab CSVForm 0.1 |
| Not Vulnerable: | |
Discussion
CSVForm Remote Arbitrary Command Execution Vulnerability
CSVForm is a Perl cgi script for Linux and Unix systems used to format input from a cgi form into a comma separated value text file, commonly used for later import into a database.
CSVForm fails to properly validate user-supplied input passed as the file variable. This input is later used to open a file for writing. Maliciously formed URLs submitted to the script may contain shell commands which will be run with the privilege level of the webserver (ie, user 'nobody'). As a result, an attacker may execute arbitrary code on the vulnerable system.
CSVForm is a Perl cgi script for Linux and Unix systems used to format input from a cgi form into a comma separated value text file, commonly used for later import into a database.
CSVForm fails to properly validate user-supplied input passed as the file variable. This input is later used to open a file for writing. Maliciously formed URLs submitted to the script may contain shell commands which will be run with the privilege level of the webserver (ie, user 'nobody'). As a result, an attacker may execute arbitrary code on the vulnerable system.
Exploit / POC
CSVForm Remote Arbitrary Command Execution Vulnerability
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
CSVForm Remote Arbitrary Command Execution Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
CSVForm Remote Arbitrary Command Execution Vulnerability
References:
References:
- CSVForm Homepage (Mutasem Abudahab)