@stake has reported multiple vulnerabilities in 4D WebSTAR, which can be exploited to compromise a vulnerable system, gain escalated privileges or disclose information.

1) A boundary error within the FTP service can be exploited to cause a stack-based buffer overflow by supplying an overly long FTP command.

Successful exploitation allows execution of arbitrary code with the privileges of the "webstar" user and "wheel" group.

2) The "ShellExample.cgi" sample CGI script can be exploited to list the content of any directory by supplying a path to the directory containing an "*" character.

3) An unspecified error within the web service can be exploited to download the "php.ini" files within the "cgi-bin/" and "fcgi-bin/" directories. This may disclose sensitive information about the web server and database server.

4) The application opens files via relative paths from the current working directory and creates files with insecure permissions. This can reportedly be exploited to gain administrative privileges or overwrite arbitrary files via symlink attacks.

The vulnerabilities have been reported in version 5.3.2 and prior.

Solution
Update to version 5.3.3.
Further details available in Customer Area

Provided and/or discovered by
Dave G, @stake.

Original Advisory
http://www.atstake.com/research/advisories/2004/a071304-1.txt

Deep Links
Links available in Customer Area