PHP-Nuke CRLF Injection Vulnerability

Bugtraq ID:	6446
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 20 2002 12:00AM
Updated:	Dec 20 2002 12:00AM
Credit:	Discovered by Ulf Harnhammer <[email protected]>.
Vulnerable:	Francisco Burzi PHP-Nuke 6.5 BETA 1 Francisco Burzi PHP-Nuke 6.0
Not Vulnerable:

PHP-Nuke CRLF Injection Vulnerability

Throughout PHP-Nuke, the PHP mail() function is implemented to handle email through web-based intefaces for various purposes (for features such as "feedback", "send this to a friend", etc). There is no input validation performed on user data passed to this function. As a result, malicious users may embed CR/LF sequences to inject additional headers into outgoing messages.

PHP-Nuke CRLF Injection Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PHP-Nuke CRLF Injection Vulnerability

Solution:
Ulf Harnhammer has developed an unofficial patch.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.


Francisco Burzi PHP-Nuke 6.0

• Ulf Harnhammar php-nuke_mail_crlf.patch
  Unofficial patch.
  http://downloads.securityfocus.com/data/vulnerabilities/patches/php-nu ke_mail_crlf.patch

PHP-Nuke CRLF Injection Vulnerability

References:

• PHP-Nuke mail CRLF Injection vulnerabilities (Ulf Harnhammar )