OnlineArts DailyDose dose.pl Remote Command Execution Vulnerability

Bugtraq ID:	9000
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 10 2003 12:00AM
Updated:	Nov 10 2003 12:00AM
Credit:	The disclosure of this issue has been credited to Alexey Sintsov aka Don_Huan <[email protected]>.
Vulnerable:	Onlinearts DailyDose 1.1
Not Vulnerable:

OnlineArts DailyDose dose.pl Remote Command Execution Vulnerability

It has been reported that DailyDose may be prone to a remote command execution vulnerability due to insufficient sanitization of $temp variable in dose.pl script. An attacker may submit arbitrary commands that will be executed in the context of the web server hosting the vulnerable script.

DailyDose v 1.1 has been reported to be prone to this issue however other versions may be affected as well.

OnlineArts DailyDose dose.pl Remote Command Execution Vulnerability

The following proof of concept has been provided:

http://www.example.com/cgi-bin/dose.pl?daily&somefile.txt&|ls|

OnlineArts DailyDose dose.pl Remote Command Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

OnlineArts DailyDose dose.pl Remote Command Execution Vulnerability

References:

• Product Homepage (OnlineArts)
  
• DailyDose v 1.1 (Alexey Sintsov )