Leif M. Wright Web Blog Remote Command Execution Vulnerability

Bugtraq ID:	9539
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 31 2004 12:00AM
Updated:	Jan 31 2004 12:00AM
Credit:	Discovery is credited to ActualMInd <[email protected]>.
Vulnerable:	Leif M. Wright Web Blog 1.1.5 Leif M. Wright Web Blog 1.1
Not Vulnerable:	Leif M. Wright Web Blog 1.5.2

Leif M. Wright Web Blog Remote Command Execution Vulnerability

Web Blog has been reported to be prone to a vulnerability that may permit remote attackers to execute arbitrary commands in the context of the hosting web server. This is due to insufficient sanitization of shell metacharacters from variables which will be used as an argument to a function that invokes the shell directly.

Leif M. Wright Web Blog Remote Command Execution Vulnerability

The following example was provided:

http://www.example.com/directory/blog.cgi?submit=ViewFile&month=[month]&year=[year]&file=|command|

Leif M. Wright Web Blog Remote Command Execution Vulnerability

Solution:
This issue was addressed in version 1.5.2 of the software.


Leif M. Wright Web Blog 1.1

• Leif M. Wright Web Blog 1.5.2
  http://leifwright.com/scripts/zips/blog.zip

Leif M. Wright Web Blog 1.1.5

• Leif M. Wright Web Blog 1.5.2
  http://leifwright.com/scripts/zips/blog.zip

Leif M. Wright Web Blog Remote Command Execution Vulnerability

References:

• Web Blog Homepage (Leif M. Wright)
  
• Web Blog 1.1 Remote Execute Commands Bug (ActualMInd )