OSSIM 'repository_attachment.php' Arbitrary File Upload Vulnerability

Bugtraq ID:	37377
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 16 2009 12:00AM
Updated:	Mar 18 2010 08:42AM
Credit:	Nahuel Grisolia
Vulnerable:	OSSIM os-sim 2.1.5 OSSIM os-sim 2.2
Not Vulnerable:	OSSIM os-sim 2.2.1

OSSIM 'repository_attachment.php' Arbitrary File Upload Vulnerability

OSSIM is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input.

An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the webserver process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible.

This issue affects OSSIM 2.1.5 and 2.2; other versions may be vulnerable as well.

OSSIM 'repository_attachment.php' Arbitrary File Upload Vulnerability

Attackers can exploit this issue via a browser.

An exploit is available.

• /data/vulnerabilities/exploits/37377.txt

OSSIM 'repository_attachment.php' Arbitrary File Upload Vulnerability

Solution:
Updates are available. Please see the references for more information.

OSSIM 'repository_attachment.php' Arbitrary File Upload Vulnerability

References:

• Arbitrary File Download in OSSIM (CYBSEC)
  
• OSSIM Homepage (OSSIM)
  
• 2010/03/11 - Some new features and security vulnerabilities fixed (AlienVault)