XAMPP CVE-2013-2586 Arbitrary File Write Vulnerability

Bugtraq ID:	62665
Class:	Design Error
CVE:	CVE-2013-2586
Remote:	Yes
Local:	No
Published:	Sep 26 2013 12:00AM
Updated:	Sep 26 2013 12:00AM
Credit:	Manuel García Cárdenas
Vulnerable:
Not Vulnerable:

XAMPP CVE-2013-2586 Arbitrary File Write Vulnerability

XAMPP is prone to a vulnerability that let attackers write or overwrite arbitrary files.

An attacker can exploit this issue to write or overwrite arbitrary files in the context of the web server, which may aid in further attacks.

XAMPP 1.8.1 is vulnerable; prior versions may also be affected.

XAMPP CVE-2013-2586 Arbitrary File Write Vulnerability

Attackers can use a browser to exploit this issue.

The following example request is available:

http://www.example.com/xampp/lang.php?WriteIntoLocalDisk

XAMPP CVE-2013-2586 Arbitrary File Write Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

XAMPP CVE-2013-2586 Arbitrary File Write Vulnerability

References:

• XAMPP 1.8.1 Local Write Access Vulnerability (ISecAuditors Security Advisories)
  
• XAMPP Homepage (XAMPP)