|
Claroline Two File Inclusion Vulnerabilities
|
|
|
|
|
Secunia Advisory:
|
SA20434
|
|
|
Release Date:
|
2006-06-05
|
|
Last Update:
|
2006-06-27
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | Claroline 1.x
|
| | CVE reference: | CVE-2006-2868 (Secunia mirror)
|
|
|
Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS! |
|
|
Description:
rgod has reported two vulnerabilities in Claroline, which can be exploited by malicious people to compromise a vulnerable system.
Input passed to the "includePath" parameter in "claroline/auth/extauth/drivers/mambo.inc.php" and "claroline/auth/extauth/drivers/postnuke.inc.php" isn't properly verified, before it is used to include files. This can be exploited to include arbitrary files from external and local resources.
The vulnerability is related to:
SA20003
Successful exploitation requires that "register_globals" is enabled.
The vulnerability has been confirmed in version 1.7.6. Prior versions may also be affected.
Solution:
Update to version 1.7.7.
http://www.claroline.net/download.htm
Provided and/or discovered by:
rgod
Changelog:
2006-06-08: Added CVE reference.
2006-06-27: Updated "Description" and "Solution" sections.
Original Advisory:
http://milw0rm.com/exploits/1877
Other References:
SA20003:
http://secunia.com/advisories/20003/
|
|
|
|
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
|
13 Related Secunia Security Advisories, displaying 10
|
|
|
1. Claroline Multiple Cross-Site Scripting Vulnerabilities
|
|
2. Claroline Multiple Cross-Site Scripting and Request Forgery Vulnerabilities
|
|
3. Claroline Multiple Vulnerabilities
|
|
4. Claroline Multiple Vulnerabilities
|
|
5. Claroline "$_SERVER['PHP_SELF']" Cross-Site Scripting Vulnerability
|
|
6. Claroline "includePath" File Inclusion Vulnerability
|
|
7. Claroline "extAuthSource['newUser']" File Inclusion Vulnerability
|
|
8. Claroline Unspecified Cross-Site Scripting Vulnerability
|
|
9. Claroline File Inclusion Vulnerabilities
|
|
10. Claroline Multiple Vulnerabilities
|
Show all related advisories
|
|
|
Send Feedback to Secunia
|
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
