TYPO3 Library for Frontend Extension 'sg_zlib' Multiple Unspecified Security Vulnerabilities
BID:60295
Info
TYPO3 Library for Frontend Extension 'sg_zlib' Multiple Unspecified Security Vulnerabilities
| Bugtraq ID: | 60295 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 04 2013 12:00AM |
| Updated: | Jun 04 2013 12:00AM |
| Credit: | The vendor reported this issue. |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
TYPO3 Library for Frontend Extension 'sg_zlib' Multiple Unspecified Security Vulnerabilities
The Library for Frontend extension for TYPO3 is prone to an unspecified arbitrary code-execution, privilege-escalation and file-disclosure vulnerability.
A remote attacker can leverage these issues to execute arbitrary code, gain escalate privileges, and retrieve arbitrary files in the context of the affected application. Successful exploits will compromise the application and possibly the underlying system.
Library for Frontend 0.2.991 and prior are vulnerable.
The Library for Frontend extension for TYPO3 is prone to an unspecified arbitrary code-execution, privilege-escalation and file-disclosure vulnerability.
A remote attacker can leverage these issues to execute arbitrary code, gain escalate privileges, and retrieve arbitrary files in the context of the affected application. Successful exploits will compromise the application and possibly the underlying system.
Library for Frontend 0.2.991 and prior are vulnerable.
Exploit / POC
TYPO3 Library for Frontend Extension 'sg_zlib' Multiple Unspecified Security Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
TYPO3 Library for Frontend Extension 'sg_zlib' Multiple Unspecified Security Vulnerabilities
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].
References
TYPO3 Library for Frontend Extension 'sg_zlib' Multiple Unspecified Security Vulnerabilities
References:
References:
- TYPO3 Web Site (TYPO3)