Psunami Bulletin Board Psunami.CGI Remote Command Execution Vulnerability

Bugtraq ID:	6607
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 13 2003 12:00AM
Updated:	Jan 13 2003 12:00AM
Credit:	Discovery of this issue is credited to dodo <[email protected]>.
Vulnerable:	Psunami Bulletin Board Psunami Bulletin Board 0.5.2 Psunami Bulletin Board Psunami Bulletin Board 0.5.1 Psunami Bulletin Board Psunami Bulletin Board 0.5 Psunami Bulletin Board Psunami Bulletin Board 0.4 Psunami Bulletin Board Psunami Bulletin Board 0.3.1 Psunami Bulletin Board Psunami Bulletin Board 0.3 Psunami Bulletin Board Psunami Bulletin Board 0.2.1 Psunami Bulletin Board Psunami Bulletin Board 0.2
Not Vulnerable:

Psunami Bulletin Board Psunami.CGI Remote Command Execution Vulnerability

Psunami Bulletin Board is prone to a remote command execution vulnerability.

Psunami does not sufficiently sanitize shell metacharacters from query string parameters. As a result, it may be possible for a remote attacker to execute arbitrary commands in the context of the webserver process.

Psunami Bulletin Board Psunami.CGI Remote Command Execution Vulnerability

This issue may be exploited with a web browser. For example:

http://www.example.com/cgi-bin/psunami.cgi?action=board&board=1&topic=|ls -al /|

The following exploits were provided:

• /data/vulnerabilities/exploits/cgi.psunami.pl
• /data/vulnerabilities/exploits/Psunami.pl

Psunami Bulletin Board Psunami.CGI Remote Command Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Psunami Bulletin Board Psunami.CGI Remote Command Execution Vulnerability

References:

• Psunami Bulletin Board CGI remote command execution (Security Bugware)
  
• Psunami Bulletin Board Homepage (Psunami Bulletin Board)