Tutos File_New Arbitrary File Upload Vulnerability

Bugtraq ID:	8012
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 20 2003 12:00AM
Updated:	Jun 20 2003 12:00AM
Credit:	Discovery credited to François SORIN.
Vulnerable:	Tutos Tutos 1.1
Not Vulnerable:

Tutos File_New Arbitrary File Upload Vulnerability

It has been reported that Tutos does not properly handle input to the file_new script. Because of this, an attacker may be able to upload arbitrary files to a vulnerable site.

Tutos File_New Arbitrary File Upload Vulnerability

The following proof-of-concept was made available by François SORIN <[email protected]>:

We can upload via http://www.example.com/tutos/file/file_new.php?link_id=1065

The path is http://www.example.com/tutos/repository/[project number]/[file
number]/FILE

Tutos File_New Arbitrary File Upload Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Tutos File_New Arbitrary File Upload Vulnerability

References:

• Tutos Homepage (Tutos)
  
• [KSA-001] Multiple vulnerabilities in Tutos (François SORIN )