|
4D WebSTAR Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA12063
|
|
|
Release Date:
|
2004-07-14
|
|
Popularity:
|
6,673 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
Privilege escalation
System access
Exposure of sensitive information
Exposure of system information
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | 4D WebSTAR V 5.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
@stake has reported multiple vulnerabilities in 4D WebSTAR, which can be exploited to compromise a vulnerable system, gain escalated privileges or disclose information.
1) A boundary error within the FTP service can be exploited to cause a stack-based buffer overflow by supplying an overly long FTP command.
Successful exploitation allows execution of arbitrary code with the privileges of the "webstar" user and "wheel" group.
2) The "ShellExample.cgi" sample CGI script can be exploited to list the content of any directory by supplying a path to the directory containing an "*" character.
3) An unspecified error within the web service can be exploited to download the "php.ini" files within the "cgi-bin/" and "fcgi-bin/" directories. This may disclose sensitive information about the web server and database server.
4) The application opens files via relative paths from the current working directory and creates files with insecure permissions. This can reportedly be exploited to gain administrative privileges or overwrite arbitrary files via symlink attacks.
The vulnerabilities have been reported in version 5.3.2 and prior.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
