TYPO3 Random Images Extension Arbitrary Command Execution Vulnerability

Bugtraq ID:	36737
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 20 2009 12:00AM
Updated:	Oct 20 2009 04:58PM
Credit:	Jan Hacker
Vulnerable:	Typo3 Random Images 1.6.4
Not Vulnerable:	Typo3 Random Images 1.6.5

TYPO3 Random Images Extension Arbitrary Command Execution Vulnerability

The Random Images extension for TYPO3 is prone to a vulnerability that lets attackers execute arbitrary commands because it fails to properly sanitize user-supplied input.

Exploiting this issue allows attackers to execute arbitrary commands in the context of the webserver.

Versions prior to Random Images 1.6.5 are vulnerable.

TYPO3 Random Images Extension Arbitrary Command Execution Vulnerability

Attackers can use readily available tools to exploit this issue.

TYPO3 Random Images Extension Arbitrary Command Execution Vulnerability

Solution:
Updates are available. Please see the references for details.


Typo3 Random Images 1.6.4

• Typo3 maag_randomimage_1.6.5.t3x
  http://typo3.org/fileadmin/ter/m/a/maag_randomimage_1.6.5.t3x

TYPO3 Random Images Extension Arbitrary Command Execution Vulnerability

References:

• Random Images Homepage (Urs Maag)
  
• Synnefoims Homepage (synnefoims)
  
• TYPO3 Collective Security Bulletin TYPO3-SA-2009-14: Several vulnerabilities in (TYPO3)