IkonBoard Cookie Default Parameter Arbitrary Command Execution Vulnerability

Bugtraq ID:	8580
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 10 2003 12:00AM
Updated:	Sep 10 2003 12:00AM
Credit:	Discovery of this vulnerability has been credited to Shan Whitman <[email protected]>.
Vulnerable:	Ikonboard.com ikonboard 3.1.2 a Ikonboard.com ikonboard 3.1.1 Ikonboard.com ikonboard 3.0 .1 - Apache Apache 1.3.22 - Apache Apache 1.3.20 - Apache Apache 1.3.19 - Apache Apache 1.3.18 - Apache Apache 1.3.17 Ikonboard.com ikonboard 2.17 Ikonboard.com ikonboard 2.1.9 Ikonboard.com ikonboard 2.1.8 Ikonboard.com ikonboard 2.1.7 b - BSDI BSD/OS 4.0.1 - Debian Linux 2.2 - Digital (Compaq) TRU64/DIGITAL UNIX 5.0 - FreeBSD FreeBSD 4.2 - HP HP-UX 11.11 - IBM AIX 4.3.3 - Mandriva Linux Mandrake 7.2 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 - NetBSD NetBSD 1.4.3 - OpenBSD OpenBSD 2.8 - Redhat Linux 7.0 - SCO eServer 2.3 - Sun Solaris 8_sparc - SuSE Linux 7.0 Ikonboard.com ikonboard 2.1 .0
Not Vulnerable:

IkonBoard Cookie Default Parameter Arbitrary Command Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.