phpLDAPadmin 'cmd.php' Local File Include Vulnerability

Bugtraq ID:	37327
Class:	Input Validation Error
CVE:	CVE-2009-4427
Remote:	Yes
Local:	No
Published:	Dec 14 2009 12:00AM
Updated:	Apr 16 2015 05:49PM
Credit:	ipsecs
Vulnerable:	phpldapadmin phpldapadmin 1.1.0.5 MandrakeSoft Enterprise Server 5 x86_64 MandrakeSoft Enterprise Server 5 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0
Not Vulnerable:

phpLDAPadmin 'cmd.php' Local File Include Vulnerability

phpLDAPadmin is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible.

phpLDAPadmin 1.1.0.5 is vulnerable; other versions may also be affected.

phpLDAPadmin 'cmd.php' Local File Include Vulnerability

An attacker can exploit this issue via a browser.

The following example URI is available:

http://www.example.com/phpldapadmin/cmd.php?cmd=../../../../etc/passwd%00

phpLDAPadmin 'cmd.php' Local File Include Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 5.0 hppa

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 ia-64

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 m68k

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 arm

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 armel

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

MandrakeSoft Enterprise Server 5 x86_64

• Mandriva phpldapadmin-1.1.0.7-1.1mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 amd64

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 alpha

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 ia-32

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 mips

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

MandrakeSoft Enterprise Server 5

• Mandriva phpldapadmin-1.1.0.7-1.1mdvmes5.noarch.rpm
  http://www.mandriva.com/en/download/

Debian Linux 5.0 s/390

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 mipsel

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 powerpc

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

Debian Linux 5.0 sparc

• Debian phpldapadmin_1.1.0.5-6+lenny1_all.deb
  http://security.debian.org/pool/updates/main/p/phpldapadmin/phpldapadm in_1.1.0.5-6+lenny1_all.deb

phpLDAPadmin 'cmd.php' Local File Include Vulnerability

References:

• phpldapadmin Homepage (phpldapadmin)