OCS Inventory NG 'cvs.php' Directory Traversal Vulnerability

Bugtraq ID:	44412
Class:	Input Validation Error
CVE:	CVE-2009-2166
Remote:	Yes
Local:	No
Published:	Jun 03 2009 12:00AM
Updated:	Mar 19 2015 09:46AM
Credit:	Nico Leidecker
Vulnerable:	OCS Inventory Team OCS Inventory NG Server 1.02
Not Vulnerable:	OCS Inventory Team OCS Inventory NG Server 1.2.1

OCS Inventory NG 'cvs.php' Directory Traversal Vulnerability

Inventory NG is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue will allow an attacker to read files outside the webroot directory. Information harvested may aid in launching further attacks.

OCS Inventory NG 1.02 (Unix) is vulnerable; other versions may also be affected.

OCS Inventory NG 'cvs.php' Directory Traversal Vulnerability

An attacker can exploit this issue with a web browser.

The following example URI is available:

http://www.example.com/ocsreports/cvs.php?log=/etc/passwd

OCS Inventory NG 'cvs.php' Directory Traversal Vulnerability

Solution:
Reports indicate vendor updates are available; this has not been confirmed by Symantec. Please contact the vendor for more information.

OCS Inventory NG 'cvs.php' Directory Traversal Vulnerability

References:

• OCS Inventory NG - Homepage (OCS Inventory Team)