PHPGroupWare Debian Package Configuration Vulnerability
BID:4424
Info
PHPGroupWare Debian Package Configuration Vulnerability
| Bugtraq ID: | 4424 |
| Class: | Configuration Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 03 2002 12:00AM |
| Updated: | Apr 03 2002 12:00AM |
| Credit: | This vulnerability discovery credited to Matthias Jordan <[email protected]>. |
| Vulnerable: |
PHPGroupWare PHPGroupWare 0.9.13 |
| Not Vulnerable: | |
Discussion
PHPGroupWare Debian Package Configuration Vulnerability
PHPGroupWare is a freely available, open source groupware system written in PHP. It is distributed and maintained by the PHPGroupWare project.
Debian packages of PHPGroupWare ship with an insecure default configuration. The PHP magic_quotes_gpc directive of the PHPGroupWare apache.conf file is disabled by default in Debian packages. This may enable remote attackers to make SQL injection attacks via PHPGroupWare.
Under normal circumstances, PHPGroupWare installs with the PHP magic_quotes_gpc directive enabled, to restrict the possibility of SQL injection attacks.
Additionally, this issue may also enable an attacker to exploit vulnerabilities that may exist in the underlying database.
PHPGroupWare is a freely available, open source groupware system written in PHP. It is distributed and maintained by the PHPGroupWare project.
Debian packages of PHPGroupWare ship with an insecure default configuration. The PHP magic_quotes_gpc directive of the PHPGroupWare apache.conf file is disabled by default in Debian packages. This may enable remote attackers to make SQL injection attacks via PHPGroupWare.
Under normal circumstances, PHPGroupWare installs with the PHP magic_quotes_gpc directive enabled, to restrict the possibility of SQL injection attacks.
Additionally, this issue may also enable an attacker to exploit vulnerabilities that may exist in the underlying database.
Exploit / POC
PHPGroupWare Debian Package Configuration Vulnerability
No exploit is required for this vulnerability. The following proof of concept has been supplied by Matthias Jordan <[email protected]>:
fubar'; CREATE TABLE thistableshouldnotexist (a int); --
No exploit is required for this vulnerability. The following proof of concept has been supplied by Matthias Jordan <[email protected]>:
fubar'; CREATE TABLE thistableshouldnotexist (a int); --
Solution / Fix
PHPGroupWare Debian Package Configuration Vulnerability
Solution:
This issue is easily mitigated by enabling the PHP magic_quotes_gpc directive in the PHPGroupWare apache.conf file.
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
This issue is easily mitigated by enabling the PHP magic_quotes_gpc directive in the PHPGroupWare apache.conf file.
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
PHPGroupWare Debian Package Configuration Vulnerability
References:
References:
- PHPGroupWare Homepage (PHPGroupWare)