DotNetNuke Install Module Remote Code Execution Vulnerability

Bugtraq ID:	45940
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 19 2011 12:00AM
Updated:	Jan 19 2011 12:00AM
Credit:	Daniël Niggebrugge of Fox-IT BV.
Vulnerable:	DotNetNuke DotNetNuke 5.6 DotNetNuke DotNetNuke 5.5.1 DotNetNuke DotNetNuke 5.5 DotNetNuke DotNetNuke 5.4.3 DotNetNuke DotNetNuke 5.4.2 DotNetNuke DotNetNuke 5.4.1 DotNetNuke DotNetNuke 5.4 DotNetNuke DotNetNuke 5.3.1 DotNetNuke DotNetNuke 5.3 DotNetNuke DotNetNuke 5.2.3 DotNetNuke DotNetNuke 5.2 DotNetNuke DotNetNuke 5.1.4 DotNetNuke DotNetNuke 5.1.3 DotNetNuke DotNetNuke 5.1.2 DotNetNuke DotNetNuke 5.1.1 DotNetNuke DotNetNuke 5.1 DotNetNuke DotNetNuke 5.0.1 DotNetNuke DotNetNuke 5.0
Not Vulnerable:	DotNetNuke DotNetNuke 5.6.1

DotNetNuke Install Module Remote Code Execution Vulnerability

DotNetNuke is prone to a remote code-execution vulnerability because it fails to adequately validate permissions before allowing a user to access the 'install' and 'uninstall' functions of modules.

An attacker can exploit this issue to execute arbitrary malicious code in the context of the webserver process. This may help the attacker compromise the application and the underlying system; other attacks are also possible.

Versions prior to DotNetNuke 5.6.1 are vulnerable.

DotNetNuke Install Module Remote Code Execution Vulnerability

Attackers can exploit this issue using a browser.

DotNetNuke Install Module Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references for more information.

DotNetNuke Install Module Remote Code Execution Vulnerability

References:

• DotNetNuke Homepage (DotNetNuke)
  
• Unauthenticated user can install/uninstall modules (DotNetNuke)
  
• DotNetNuke Remote Code Execution vulnerability (Daniel Niggebrugge )