Dokeos and Chamilo Multiple Remote File Disclosure Vulnerabilities

Bugtraq ID:	46173
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 05 2011 12:00AM
Updated:	Feb 08 2011 03:40PM
Credit:	beford
Vulnerable:	Dokeos Dokeos 1.8.6 1 Dokeos Dokeos 2.0 Chamilo Chamilo 1.8.7 1
Not Vulnerable:	Dokeos Dokeos 1.8.6 2

Dokeos and Chamilo Multiple Remote File Disclosure Vulnerabilities

Dokeos and Chamilo are prone to multiple file-disclosure vulnerabilities because they fail to properly sanitize user-supplied input.

An attacker can exploit these vulnerabilities to view local files in the context of the webserver process. This may aid in further attacks.

Dokeos versions 1.8.6.1 through 2.0 and Chamilo 1.8.7.1 are vulnerable; other versions may also be affected.

Dokeos and Chamilo Multiple Remote File Disclosure Vulnerabilities

Attackers can exploit these issues via a browser.

The following example URIs are available:

http://www.example.com/main/gradebook/open_document.php?file=../main/inc/conf/configuration.php

http://www.example.com/main/document/download.php?doc_url=/..././..././..././main/inc/conf/configuration.php

Dokeos and Chamilo Multiple Remote File Disclosure Vulnerabilities

Solution:
Updates are available; please see the references for more information.

Dokeos and Chamilo Multiple Remote File Disclosure Vulnerabilities

References:

• Chamilo Homepage (Chamilo)
  
• Chamilo Reference Page (Google)
  
• Dokeos 1.8.6.2 released (Dokeos)
  
• Dokeos Homepage (Dokeos)
  
• Re: Chamilo 1.8.7 / Dokeos 1.8.6 Remote File Disclosure ([email protected])