Ubuntu Drupal Theme - Brown Directory Traversal Vulnerability
BID:44281
Info
Ubuntu Drupal Theme - Brown Directory Traversal Vulnerability
| Bugtraq ID: | 44281 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 20 2010 12:00AM |
| Updated: | Oct 20 2010 12:00AM |
| Credit: | Steve Foris |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Ubuntu Drupal Theme - Brown Directory Traversal Vulnerability
Ubuntu Drupal Theme - Brown is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
An attacker may leverage this issue to retrieve arbitrary files in the context of the affected application, potentially revealing sensitive information that may lead to other attacks.
Versions prior to Ubuntu Drupal Theme - Brown 6.x-8.1 and Ubuntu Drupal Theme - Brown 5.x are vulnerable; others may also be affected.
Ubuntu Drupal Theme - Brown is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
An attacker may leverage this issue to retrieve arbitrary files in the context of the affected application, potentially revealing sensitive information that may lead to other attacks.
Versions prior to Ubuntu Drupal Theme - Brown 6.x-8.1 and Ubuntu Drupal Theme - Brown 5.x are vulnerable; others may also be affected.
Exploit / POC
Ubuntu Drupal Theme - Brown Directory Traversal Vulnerability
Attackers can exploit this issue through a browser.
Attackers can exploit this issue through a browser.
Solution / Fix
Ubuntu Drupal Theme - Brown Directory Traversal Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Ubuntu Drupal Theme - Brown Directory Traversal Vulnerability
References:
References: