Ilia Alshanetsky FUDForum File Modification Vulnerability

Bugtraq ID:	5502
Class:	Design Error
CVE:	CVE-2002-1422
Remote:	Yes
Local:	No
Published:	Aug 19 2002 12:00AM
Updated:	Jul 11 2009 03:56PM
Credit:	Discovery credited to Ulf Harnhammar <[email protected]>.
Vulnerable:	Ilia Alshanetsky FUDForum 2.0.2 Ilia Alshanetsky FUDForum 1.9.8 Ilia Alshanetsky FUDForum 1.2.8
Not Vulnerable:	Ilia Alshanetsky FUDForum 2.2.3 Ilia Alshanetsky FUDForum 2.2 .0

Ilia Alshanetsky FUDForum File Modification Vulnerability

Reportedly, it is possible for an administrator to manipulate (create, modify etc.) files outside of the FUDForum directories. This vulnerability is present in the 'adm/admbrowse.php' script. The vulnerability is the result of FUDForum allowing access to files and directories outside of FUDForum directories.

Ilia Alshanetsky FUDForum File Modification Vulnerability

The following proof of concept was provided by Ulf Harnhammar <[email protected]>:

http://victim.com/admbrowse.php?down=1&cur=%2Fetc%2F&dest=passwd&rid=1&S=[someid]

Ilia Alshanetsky FUDForum File Modification Vulnerability

Solution:
The following upgrades are available:


Ilia Alshanetsky FUDForum 1.2.8

• Ilia Alshanetsky FUDforum2_20020712.tar.gz
  http://fud.prohost.org/download/FUDforum2_20020712.tar.gz

Ilia Alshanetsky FUDForum 1.9.8

• Ilia Alshanetsky FUDforum2_20020712.tar.gz
  http://fud.prohost.org/download/FUDforum2_20020712.tar.gz

Ilia Alshanetsky FUDForum 2.0.2

• Ilia Alshanetsky FUDforum2_20020712.tar.gz
  http://fud.prohost.org/download/FUDforum2_20020712.tar.gz

Ilia Alshanetsky FUDForum File Modification Vulnerability

References:

• FUDForum (Ilia Alshanetsky)