Sawmill Multiple Security Vulnerabilities

Bugtraq ID:	44292
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 21 2010 12:00AM
Updated:	Oct 21 2010 12:00AM
Credit:	Johannes Greil
Vulnerable:	Flowerfire Sawmill 7.2.18 Flowerfire Sawmill 7.2.17 Flowerfire Sawmill 5.0.21 Flowerfire Sawmill 8.1.7 Flowerfire Sawmill 8.1.5.1
Not Vulnerable:	Flowerfire Sawmill 8.1.7.3

Sawmill Multiple Security Vulnerabilities

Sawmill is prone to multiple security vulnerabilities, including unauthorized-access, security-bypass, and cross-site-scripting issues.

Attackers can exploit these issues to gain administrative access to the affected application, execute arbitrary commands, perform unauthorized actions, and steal cookie-based authentication credentials. Other attacks are also possible.

Versions prior to Sawmill 8.1.7.3 are vulnerable.

Sawmill Multiple Security Vulnerabilities

Attackers can use a browser to exploit these issues. To exploit a cross-site scripting vulnerability, the attacker must entice an unsuspecting user into following a specially crafted link.

The following example URIs and data are available:

• /data/vulnerabilities/exploits/44292.txt

Sawmill Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references for details.

Sawmill Multiple Security Vulnerabilities

References:

• Multiple critical vulnerabilities Sawmill - Universal Log File Analysis (SEC Consult)
  
• Sawmill Homepage (Sawmill)
  
• Version 8.1.7, shipped October 11, 2010 (Flowerfire)
  
• SEC Consult SA-20101021-0 :: Multiple critical vulnerabilities in Sawmill log an (Johannes Greil )