Joel Palmius Mod_Survey Data Injection Vulnerability
BID:7192
Info
Joel Palmius Mod_Survey Data Injection Vulnerability
| Bugtraq ID: | 7192 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 23 2003 12:00AM |
| Updated: | Mar 23 2003 12:00AM |
| Credit: | This issue was discovered by Nicklas Deutschmann. |
| Vulnerable: |
Joel Palmius Mod_Survey 3.0.15 -pre5 Joel Palmius Mod_Survey 3.0.15 -pre4 Joel Palmius Mod_Survey 3.0.15 -pre3 Joel Palmius Mod_Survey 3.0.15 -pre2 Joel Palmius Mod_Survey 3.0.15 -pre1 Joel Palmius Mod_Survey 3.0.14 d Joel Palmius Mod_Survey 3.0.14 Joel Palmius Mod_Survey 3.0.13 Joel Palmius Mod_Survey 3.0.12 Joel Palmius Mod_Survey 3.0.11 Joel Palmius Mod_Survey 3.0.9 Joel Palmius Mod_Survey 3.0 .10 |
| Not Vulnerable: |
Joel Palmius Mod_Survey 3.0.15 -pre6 Joel Palmius Mod_Survey 3.0.14 e |
Discussion
Joel Palmius Mod_Survey Data Injection Vulnerability
Mod_Survey does not sufficiently sanitize data supplied via ENV tags. It has been reported by the vendor that this may allow for injection of malicious data into the data repository. Exploitation may allow for manipulation of environment variables or the possibility of executing database commands through injection of SQL syntax. Other attacks which may also be possible.
This is only an issue with surveys that use ENV tags.
Mod_Survey does not sufficiently sanitize data supplied via ENV tags. It has been reported by the vendor that this may allow for injection of malicious data into the data repository. Exploitation may allow for manipulation of environment variables or the possibility of executing database commands through injection of SQL syntax. Other attacks which may also be possible.
This is only an issue with surveys that use ENV tags.
Exploit / POC
Joel Palmius Mod_Survey Data Injection Vulnerability
There is no exploit required.
There is no exploit required.
Solution / Fix
Joel Palmius Mod_Survey Data Injection Vulnerability
Solution:
This issue was addressed in Mod_Survey versions 3.0.14e and 3.0.15-pre6. Mod_Survey version 3.0.8 and prior are also not affected.
Joel Palmius Mod_Survey 3.0.11
Joel Palmius Mod_Survey 3.0.12
Joel Palmius Mod_Survey 3.0.13
Joel Palmius Mod_Survey 3.0.14
Joel Palmius Mod_Survey 3.0.14 d
Joel Palmius Mod_Survey 3.0.15 -pre2
Joel Palmius Mod_Survey 3.0.15 -pre5
Joel Palmius Mod_Survey 3.0.15 -pre3
Joel Palmius Mod_Survey 3.0.15 -pre1
Joel Palmius Mod_Survey 3.0.15 -pre4
Joel Palmius Mod_Survey 3.0.9
Solution:
This issue was addressed in Mod_Survey versions 3.0.14e and 3.0.15-pre6. Mod_Survey version 3.0.8 and prior are also not affected.
Joel Palmius Mod_Survey 3.0.11
-
Joel Palmius Mod_Survey 3.0.14e
http://gathering.itm.mh.se/modsurvey/download.php
Joel Palmius Mod_Survey 3.0.12
-
Joel Palmius Mod_Survey 3.0.14e
http://gathering.itm.mh.se/modsurvey/download.php
Joel Palmius Mod_Survey 3.0.13
-
Joel Palmius Mod_Survey 3.0.14e
http://gathering.itm.mh.se/modsurvey/download.php
Joel Palmius Mod_Survey 3.0.14
-
Joel Palmius Mod_Survey 3.0.14e
http://gathering.itm.mh.se/modsurvey/download.php
Joel Palmius Mod_Survey 3.0.14 d
-
Joel Palmius Mod_Survey 3.0.14e
http://gathering.itm.mh.se/modsurvey/download.php
Joel Palmius Mod_Survey 3.0.15 -pre2
-
Joel Palmius Mod_Survey 3.0.15-pre6
http://gathering.itm.mh.se/modsurvey/download.php
Joel Palmius Mod_Survey 3.0.15 -pre5
-
Joel Palmius Mod_Survey 3.0.15-pre6
http://gathering.itm.mh.se/modsurvey/download.php
Joel Palmius Mod_Survey 3.0.15 -pre3
-
Joel Palmius Mod_Survey 3.0.15-pre6
http://gathering.itm.mh.se/modsurvey/download.php
Joel Palmius Mod_Survey 3.0.15 -pre1
-
Joel Palmius Mod_Survey 3.0.15-pre6
http://gathering.itm.mh.se/modsurvey/download.php
Joel Palmius Mod_Survey 3.0.15 -pre4
-
Joel Palmius Mod_Survey 3.0.15-pre6
http://gathering.itm.mh.se/modsurvey/download.php
Joel Palmius Mod_Survey 3.0.9
-
Joel Palmius Mod_Survey 3.0.14e
http://gathering.itm.mh.se/modsurvey/download.php
References
Joel Palmius Mod_Survey Data Injection Vulnerability
References:
References:
- Mod_Survey Homepage (Joel Palmius )
- Mod_Survey Security Advisory 2003-03-23, ENV tags (Joel Palmius)
- Mod_Survey ENV tag vulnerability (Joel Palmius
)